CVE-2000-1117 — MEDIUM (5.0)

Vulnerability Description

The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web site operators to determine the existence of files on the client by measuring delays in the execution of the getSystemResource method.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Ibm	Lotus Notes	r5

Related Weaknesses (CWE)

CWE-203

References

http://archives.neohapsis.com/archives/bugtraq/2000-11/0341.htmlBroken Link
http://www.securityfocus.com/bid/1994Broken LinkExploitThird Party Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-11/0341.htmlBroken Link
http://www.securityfocus.com/bid/1994Broken LinkExploitThird Party Advisory

FAQ

What is CVE-2000-1117?

CVE-2000-1117 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web site operators to determine the existence of files on the client by measuring de...

How severe is CVE-2000-1117?

CVE-2000-1117 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2000-1117?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Lotus Notes.