CVEvulnerability
CVE-2008-2499
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-05-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL.
Affected configurations
• ibm lotus sametime (<= 7.5)
• ibm lotus sametime (>= 8.0 < 8.0.1)
• ibm lotus sametime 7.5.1
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/30309 Third Party Advisory
- http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21303920 Vendor Advisory
- http://www.securityfocus.com/bid/29328 Exploit, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1020093 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/1595/references Third Party Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-08-028/ Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42575 Third Party Advisory, VDB Entry
- http://secunia.com/advisories/30309 Third Party Advisory
- http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21303920 Vendor Advisory
- http://www.securityfocus.com/bid/29328 Exploit, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1020093 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/1595/references Third Party Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-08-028/ Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42575 Third Party Advisory, VDB Entry