CVE-2002-0407 Information disclosure in n/a
Remote attackers can determine the server's physical pathname via crafted requests to htcgibin.exe, exposing internal file system details.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-0407?
CVE-2002-0407 is a medium-severity vulnerability in n/a, published on 11 Jun 2002. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
htcgibin.exe in Lotus Domino server 5.0.9a and earlier allows remote attackers to determine the physical pathname for the server via requests that contain certain MS-DOS device names such as com5, such as (1) a request with a .pl or .java extension, or (2) a request containing a large number of periods, which causes htcgibin.exe to leak the pathname in an error message.
Which versions are affected by CVE-2002-0407?
It affects 1 product.
Products include Lotus Domino.
How do I fix CVE-2002-0407?
No fix has been published for CVE-2002-0407 yet. Limit exposure of the affected software until one is available.
Is CVE-2002-0407 being exploited?
There is no known exploitation of CVE-2002-0407 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-w4ww-gfvw-wghf.