CVE-2002-0245 in Domino
Summary
by MITRE
Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physical path of the server via a request for a nonexistent file with a .pl (Perl) extension, which leaks the pathname in the error message, or (2) make any request that causes an HTTP 500 error, which leaks the server s version name in the HTTP error message.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 09/21/2025
The vulnerability described in CVE-2002-0245 affects Lotus Domino server version 5.0.8 when configured with the NoBanner option enabled. This security flaw represents a classic information disclosure vulnerability that exposes sensitive system details to remote attackers through carefully crafted HTTP requests. The vulnerability specifically targets the server's error handling mechanisms and demonstrates how improper error message generation can inadvertently reveal critical system information that should remain hidden from external parties.
The technical exploitation of this vulnerability occurs through two distinct attack vectors that leverage the server's response to malformed requests. The first vector involves sending a request for a nonexistent file with a .pl (Perl) extension, which triggers an error response that inadvertently includes the physical path of the server in the error message. The second vector allows attackers to construct any request that results in an HTTP 500 error condition, thereby exposing the server's version name within the error response headers or body. Both attack methods exploit the server's failure to properly sanitize error messages before returning them to clients, creating a direct information leak that violates fundamental security principles of least privilege and information hiding.
The operational impact of this vulnerability extends beyond simple information disclosure, as it provides attackers with critical reconnaissance data that can be used to plan more sophisticated attacks. The leaked physical path information can be used for directory traversal attacks, file system enumeration, or to identify potential targets for further exploitation. Meanwhile, the server version disclosure reveals the exact software version in use, allowing attackers to identify known vulnerabilities specific to that version and potentially exploit them. This vulnerability directly maps to CWE-200 (Information Exposure) and aligns with ATT&CK technique T1212 (Exploitation for Credential Access) as it provides attackers with information necessary to craft more targeted attacks. The exposure of server version information also facilitates automated scanning and enumeration tools that can quickly identify vulnerable systems based on known exploits for specific Lotus Domino versions.
Organizations affected by this vulnerability should immediately implement mitigations including disabling the NoBanner option, configuring proper error handling to prevent information leakage, and implementing network-level controls to restrict access to server error responses. The recommended approach involves configuring the server to return generic error messages that do not contain system-specific information, while also ensuring that all error handling mechanisms properly sanitize output before transmission. Additionally, network segmentation and firewall rules should be implemented to limit access to the Domino server from untrusted networks, and regular security audits should verify that error messages do not contain sensitive information. This vulnerability demonstrates the critical importance of proper input validation and error handling in web applications, as even seemingly benign error conditions can provide attackers with valuable reconnaissance information that significantly increases the attack surface of affected systems.