medium6.5Public exploit code
CVE-2017-1129
IBM Notes 8.5 and 9.0 is vulnerable to a denial of service.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM Notes 8.5.x/9.0.x - Denial of Service2017-09-02 · dos · multiple · Verified
- IBM Notes 8.5.x/9.0.x - Denial of Service (Metasploit)2017-08-31 · dos · multiple
Impact
IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it could cause the Notes client to hang and have to be restarted. IBM X-Force ID: 121370.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Inotes | Versions 8.5.0.0, 8.5.1.0, 8.5.1.1, 8.5.1.5, 8.5.2.0, 8.5.2.1 |
| Ibm | Expeditor | Versions 6.2.1, 6.2.2, 6.2.3 |
References
- NVD record
- CVE.org record
- http://www.ibm.com/support/docview.wss?uid=swg21999385
- http://www.ibm.com/support/docview.wss?uid=swg22002103
- https://exchange.xforce.ibmcloud.com/vulnerabilities/121370
- https://www.exploit-db.com/exploits/42602/
- http://www.ibm.com/support/docview.wss?uid=swg21999385
- http://www.ibm.com/support/docview.wss?uid=swg22002103
- https://exchange.xforce.ibmcloud.com/vulnerabilities/121370
- https://www.exploit-db.com/exploits/42602/