Lucene search
HistoryJan 09, 2001 - 5:00 a.m.
CVE-2000-1117
cve-2000-1117
ecl
jvm
lotus notes client r5
malicious
getsystemresource method
6.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
70.0%
The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web site operators to determine the existence of files on the client by measuring delays in the execution of the getSystemResource method.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm:lotus_notes | ibm lotus notes | eq | r5 |
Related
cert
cert
Lotus Notes Java VM leaks file existence through timing difference in ECLs
2001-05-14 00:00:00
6.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
70.0%
Related for CVE-2000-1117