CVE-2000-0021

Medium

Published: 01/12/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.36%

68th percentile - higher than 68% of all known CVEs

Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin.

Attackers may exploit this vulnerability to gain information about the server's structure, potentially leading to further attacks.

It is recommended to configure the server to not disclose path information for scripts and to monitor server logs for suspicious requests.

Original NVD description (English source)

Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin.