Signature Detail

HTTP: Lotus Domino Username Discovery

This signature detects attempts to exploit a known vulnerability in Lotus Domino Web Server 5.0.8. Attackers can directly request a user mail database to determine if the user account exists on the server; attackers can use this information create a more sophisticated attack or more intelligent brute forcing.

Extended Description

Successful exploitation of the vulnerability could allow a remote attacker to determine existing user names on a Lotus Domino Server. This may help them execute further attacks.

References

• URL: http://www.securitytracker.com/alerts/2002/Feb/1003417.html