{
  "schema_version": "1.4.0",
  "id": "GHSA-w4ww-gfvw-wghf",
  "modified": "2022-04-30T18:19:11Z",
  "published": "2022-04-30T18:19:11Z",
  "aliases": [
    "CVE-2002-0407"
  ],
  "details": "htcgibin.exe in Lotus Domino server 5.0.9a and earlier allows remote attackers to determine the physical pathname for the server via requests that contain certain MS-DOS device names such as com5, such as (1) a request with a .pl or .java extension, or (2) a request containing a large number of periods, which causes htcgibin.exe to leak the pathname in an error message.",
  "severity": [],
  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-0407"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=bugtraq&m=101310812804716&w=2"
    },
    {
      "type": "WEB",
      "url": "http://www.iss.net/security_center/static/8160.php"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/265380"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/4406"
    }
  ],
  "database_specific": {
    "cwe_ids": [],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2002-07-26T04:00:00Z"
  }
}