CVEvulnerability

CVE-2008-0945

3.5 LOW Published 2008-02-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-02-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:N/I:N/A:P
Weaknesses
CWE-134

Description

Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in an IP address field.

Affected configurations

• ipswitch imserver (<= 2.0.8.1) • ipswitch instant messaging (<= 2.0.8.1)

Related

Weakness · CWE (1)

  • CWE-134 Use of Externally-Controlled Format String weakness

References