|
|
|
|
|
|
|
| |
Trend Micro Scanmail for Domino nsf File Information Disclosure |
|
| This script is Copyright (C) 2004-2010 by DokFLeed |
|
|
| Family | CGI abuses |
| Nessus Plugin ID | 14312 (lotus_smency.nasl) |
| Bugtraq ID | 11612
|
| CVE ID | CVE-2004-1003
|
|
| Description: |
Synopsis :
The remote antivirus is vulnerable to several flaws.
Description :
This script attempts to read sensitive files used by Trend ScanMail,
an anti-virus protection program for Domino (formerly Lotus Notes).
An attacker, exploiting this flaw, may gain access to confidential
data or disable the anti-virus protection.
Solution :
Password protect those files
Risk factor :
Medium / CVSS Base Score : 6.4
(CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P)
|
|
|
|
|
|