CVE-2002-0408: Lotus Domino

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

htcgibin.exe in Lotus Domino server 5.0.9a and earlier, when configured with the NoBanner setting, allows remote attackers to determine the version number of the server via a request that generates an HTTP 500 error code, which leaks the version in a hard-coded error message.

Affected products

• Lotus Domino: up to and including 5.0.9a

Published 2002-07-26. Last modified 2026-06-16.