Every CVE Search/ Get API key

CVE-2003-1408

Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an...

5.0 Medium

Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a filename with a trailing dot.

Exploit likelihood

1.32%Up 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a filename with a trailing dot.

Record
CVE-2003-1408
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a filename with a trailing dot.

Record
CVE-2003-1408
Updated
2026-11-02
EUVDEUVD-2003-1398 No score

Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a filename with a trailing dot.

Record
EUVD-2003-1398
Updated
2026-11-03
GitHub AdvisoriesGHSA-4747-c4gm-2j5q No score

Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an...

Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a filename with a trailing dot.

Record
GHSA-4747-c4gm-2j5q
Weakness
CWE-200
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2003-1408 is a medium vulnerability (CVSS 5.0) in Lotus Domino Server, published December 31, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.32%, the 71st percentile. No source names a fixed version.

References

MoveEnter Open