Vulnerability Development mailing list archives
Re: Notes Domino Server Platform for e-commerce?
From: derek () INFINET COM (Derek Reynolds)
Date: Tue, 8 Feb 2000 18:46:45 -0500
Hello Frank, Lotus Domino/Notes version 4.6x and 5 is secure. Notes passwords are stored in the NAB which can be secured with encryption. Be sure to change the default ACL access on the Domino configuration dB and the Web Admin dB to NO ACCESS If you have any questions or concerns let me know. -- Best regards, Derek mailto:derek () infinet com CLP - Certified Lotus Professional R4/R5 Monday, February 07, 2000, 8:23:38 AM, you wrote: BF> Hi there, BF> some folks in my company would like to install an e-commerce BF> web-server based on Lotus Domino 5.0. Does anybody have concerns BF> about the vulnerability of Notes/Domino regarding this purpose? BF> I have heart that it should be possible for *bad* people to get BF> the admin password out of a notes database through a web inter- BF> face. Is there anybody who can confirm this? If so, is there BF> anybody who knows whether I can suppress this kind of hacking BF> with a firewall? BF> Any kind of suggestions expected to be helpful! BF> Frank Baasner BF> Aral Germany BF> (originally I sent this message to the bugtraq list but got the BF> reply fomr Elias Levy, <owner-bugtraq () securityfocus com>: BF> "This type of messages should be sent to vuln-dev at BF> vuln-dev () securityfocus com." Here I am.)
Current thread:
- fooling hubs [ARP Spoofing] David aka SpanskA (Feb 03)
- Re: fooling hubs [ARP Spoofing] Panagiotis Malakoudis (Feb 03)
- Re: fooling hubs [ARP Spoofing] Robert van der Meulen (Feb 04)
- Re: fooling hubs [ARP Spoofing] Trevor Schroeder (Feb 04)
- Re: fooling hubs [ARP Spoofing] Jeff Bachtel (Feb 05)
- Re: fooling hubs [ARP Spoofing] H D Moore (Feb 07)
- Notes Domino Server Platform for e-commerce? Baasner, Frank (Feb 07)
- Re: Notes Domino Server Platform for e-commerce? Derek Reynolds (Feb 08)
- Re: Notes Domino Server Platform for e-commerce? Marc Esipovich (Feb 08)
- Re: Notes Domino Server Platform for e-commerce? Derek Reynolds (Feb 08)
- Re: Notes Domino Server Platform for e-commerce? Marc Esipovich (Feb 09)
- Re: Notes Domino Server Platform for e-commerce? Derek Reynolds (Feb 09)
- Re: Notes Domino Server Platform for e-commerce? Blue Boar (Feb 09)
- Re: Notes Domino Server Platform for e-commerce? Derek Reynolds (Feb 09)
- Re: Notes Domino Server Platform for e-commerce? Mark L. Jackson (Feb 09)
- Re: Notes Domino Server Platform for e-commerce? Allan Jacobsen (Feb 09)
- Re: Notes Domino Server Platform for e-commerce? Wozz (Feb 10)
- Re: Notes Domino Server Platform for e-commerce? Ryan R Permeh (Feb 09)