Lotus Domino Address Book Information Disclosure

low Nessus Network Monitor Plugin ID 2567

Synopsis

The remote host may give an attacker information useful for future attacks.

Description

The remote host is running Lotus Domino's names.nsf application. This application allows web clients to browse address books via the web. An attacker can use this information to mount more sophisticated attacks.

Solution

Remove the application or use Access Control Lists (ACLs) to filter access to the application.

Plugin Details

Severity: Low

ID: 2567

Family: Web Servers

Published: 1/28/2005

Updated: 1/15/2016