Vulnerability Scanning Solutions, LLC.
Our Process
What We Scan For
Sample Report
Client List
Contact Us
What We Scan For
Family: Web Servers --> Category: infos

Lotus Domino administration databases Vulnerability Scan

Vulnerability Scan Summary
Checks if Lotus Domino administration databases can be anonymously accessed

Detailed Explanation for this Vulnerability Test

This script acertains if some default databases can be read

An anonymous user can retrieve information from this
Lotus Domino server: users, databases, configuration
of servers (including operating system and hard
disk partitioning), logs of access to users (which
could expose sensitive data if GET html forms are used)..

This issues are discussed in 'Lotus White Paper:
A Guide to Developing Secure Domino Applications' (december 1999)

Solution: verify all the ACLs for these databases and remove those not needed

Threat Level: Medium

Click HERE for more information and discussions on this network vulnerability scan.


P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.