CVE-2008-0945 Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to cause a denia...
LowCVSS 3.5
EPSS 6.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in an IP address field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ipswitch imserver | <= 2.0.8.1 | No fix listed |
| ipswitch instant messaging | <= 2.0.8.1 | No fix listed |
References
- aluigi.altervista.org
- aluigi.org
- 28824 third-party-advisory vendor-advisory
- 3697 third-party-advisory
- 20080207 Multiple vulnerabilities in Ipswitch Instant Messaging 2.0.8.1 mailing-list
- 27677 vdb-entry