Description
Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect directories via a .. (dot dot) in the directory creation command.
References
- 11143 third-party-advisory
- 9900 vdb-entry
- lotus-webadmin-file-disclosure(15504) vdb-entry
- lotus-dotdot-file-creation(15503) vdb-entry
- http://members.lycos.co.uk/r34ct/main/ibm_lotus_domino/lotus.txt