CVE-2008-2499
high · 7.5Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL.
7.5
CVSS
77.5%
EPSS (exploit prob.)
100th
EPSS percentile
2008-05-29
Published
AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| ibm | lotus_sametime | <= 7.5 |
| ibm | lotus_sametime | >= 8.0, < 8.0.1 |
| ibm | lotus_sametime | 7.5.1 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/30309
- http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21303920
- http://www.securityfocus.com/bid/29328
- http://www.securitytracker.com/id?1020093
- http://www.vupen.com/english/advisories/2008/1595/references
- http://www.zerodayinitiative.com/advisories/ZDI-08-028/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42575
- http://secunia.com/advisories/30309
- http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21303920
- http://www.securityfocus.com/bid/29328
- http://www.securitytracker.com/id?1020093
- http://www.vupen.com/english/advisories/2008/1595/references
- http://www.zerodayinitiative.com/advisories/ZDI-08-028/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42575
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2008-2499