CVE-2000-1117 Information disclosure in n/a
Malicious websites can determine the existence of local files on Lotus Notes Client R5 by measuring execution delays in the JVM.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2000-1117?
CVE-2000-1117 is a medium-severity vulnerability in Ibm Lotus Notes, published on 19 Dec 2000. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web site operators to determine the existence of files on the client by measuring delays in the execution of the getSystemResource method.
Weakness: CWE-203
Which versions are affected by CVE-2000-1117?
It affects 1 product.
Products include Ibm Lotus Notes.
How do I fix CVE-2000-1117?
No fix has been published for CVE-2000-1117 yet. Limit exposure of the affected software until one is available.
Is CVE-2000-1117 being exploited?
There is no known exploitation of CVE-2000-1117 in the wild and no public exploit code.
Other vulnerabilities in Ibm Lotus Notes
Sources
Also known as GHSA-xh44-f8rg-h6h3.