CVE-2008-2499

Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 98%
VendorProductVersion
ibmlotus_sametime
𝑥
≤ 7.5
ibmlotus_sametime
8.0 ≤
𝑥
< 8.0.1
ibmlotus_sametime
7.5.1:cf1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/30309
http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21303920
http://www.securityfocus.com/bid/29328
http://www.securitytracker.com/id?1020093
http://www.vupen.com/english/advisories/2008/1595/references
http://www.zerodayinitiative.com/advisories/ZDI-08-028/
https://exchange.xforce.ibmcloud.com/vulnerabilities/42575
http://secunia.com/advisories/30309
http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21303920
http://www.securityfocus.com/bid/29328
http://www.securitytracker.com/id?1020093
http://www.vupen.com/english/advisories/2008/1595/references
http://www.zerodayinitiative.com/advisories/ZDI-08-028/
https://exchange.xforce.ibmcloud.com/vulnerabilities/42575