Lotus Domino Server Vulnerability Allows Remote File Access

CVE-2001-1567

Summary

Lotus Domino Server versions 5.0.9a and earlier exhibit a security flaw that allows remote attackers to bypass established security restrictions. By sending an HTTP request containing an excessive number of '+' characters preceding the .nsf file extension, which are subsequently converted to spaces by the Domino server, attackers can potentially view sensitive Notes database files and template files (.ntf). This vulnerability undermines data confidentiality and presents significant risks for information exposure.

References