CVE-2002-0407

htcgibin.exe in Lotus Domino server 5.0.9a and earlier allows remote attackers to determine the physical pathname for the server via requests that contain certain MS-DOS device names such as com5, such as (1) a request with a .pl or .java extension, or (2) a request containing a large number of periods, which causes htcgibin.exe to leak the pathname in an error message.

• http://marc.info/?l=bugtraq&m=101310812804716&w=2
• http://www.iss.net/security_center/static/8160.phpPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/265380
• http://www.securityfocus.com/bid/4406Exploit, Patch, Vendor Advisory
• http://marc.info/?l=bugtraq&m=101310812804716&w=2
• http://www.iss.net/security_center/static/8160.phpPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/265380
• http://www.securityfocus.com/bid/4406Exploit, Patch, Vendor Advisory

Published

Jul 26, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0401SMB dissector in Ethereal 0.9.3 and earlier allows remote at…7.5
• CVE-2002-0402Buffer overflow in X11 dissector in Ethereal 0.9.3 and earli…
• CVE-2002-0403DNS dissector in Ethereal before 0.9.3 allows remote attacke…
• CVE-2002-0404Vulnerability in GIOP dissector in Ethereal before 0.9.3 all…
• CVE-2002-0405Buffer overflow in Transsoft Broker FTP Server 5.0 evaluatio…
• CVE-2002-0406Menasoft SPHERE server 0.99x and 0.5x allows remote attacker…
• CVE-2002-0408htcgibin.exe in Lotus Domino server 5.0.9a and earlier, when…
• CVE-2002-0409orderdetails.aspx, as made available to Microsoft .NET devel…
• CVE-2002-0410send_message.php in AeroMail before 1.45 allows remote attac…
• CVE-2002-0411Cross-site scripting vulnerability in message.php for AeroMa…
• CVE-2002-0412Format string vulnerability in TraceEvent function for ntop …
• CVE-2002-0413Cross-site scripting vulnerability in ReBB allows remote att…