Unscored CVE-2002-0037 EUVD-2002-0037GHSA-w4q4-x7m7-mhhx

Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via …

Published Apr 12, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses the object.

References

lotus-domino-nsfdbreadobject(10095) vdb-entry
20010917 Re: Lotus Notes: File attachments may be extracted regardless of document security mailing-list
20010917 Lotus Notes: File attachments may be extracted regardless of document security mailing-list
VU#657899 third-party-advisory