CVE-2001-0009

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a .. attack.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.osvdb.org/1703
http://www.securityfocus.com/archive/1/154537Vendor Advisory
http://www.securityfocus.com/archive/1/155124Patch
http://www.securityfocus.com/bid/2173Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5899
http://www.osvdb.org/1703
http://www.securityfocus.com/archive/1/154537Vendor Advisory
http://www.securityfocus.com/archive/1/155124Patch
http://www.securityfocus.com/bid/2173Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5899

Timeline

Published: Feb 12, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-001010.0Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.CVE-2001-001110.0Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.CVE-2001-00125.0BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.CVE-2001-001310.0Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.CVE-2001-00145.0Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attacker CVE-2001-00157.2Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM_COPYDATA" message to an invisible CVE-2001-00167.2NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which could allow local user CVE-2001-00175.0Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the "Malf CVE-2001-00185.0Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to cause a denial of se CVE-2001-00192.1Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the "show script," "c CVE-2001-00202.1Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to read arbitrary files CVE-2001-002110.0MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template