By creating a specially crafted url, the authentication mechanism of Domino database can be circumvented. These urls should look like: http://host.com/<databasename>.ntf<buff>.nsf/ in which <buff> has a certain length.

Upgrade to the latest version of Domino.