CVE-2004-2369: Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect directories via a

Unscored severity · published Dec 31, 2004

CVE-2004-2369

Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect directories via a

–

CVSS

1.6%

EPSS

On KEV

Description

Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect directories via a .. (dot dot) in the directory creation command.

Exploitation

Is it being used?

Exploit prediction (EPSS)1.6% · higher than 76% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Lotus Domino · Ibm

6.5.1 · source: NVD

Affected product

Lotus Domino

Ibm

All Lotus Domino CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2004-2369

CVE.org

https://www.cve.org/CVERecord?id=CVE-2004-2369

Exploit

http://members.lycos.co.uk/r34ct/main/ibm_lotus_domino/lotus.txt

Vendor Advisory

http://secunia.com/advisories/11143/

Exploit

http://www.securityfocus.com/bid/9900

exchange.xforce.ibmcloud.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/15503

exchange.xforce.ibmcloud.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/15504