CVE-2008-2499 Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary...
HighCVSS 7.5
EPSS 77.5%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm lotus sametime | <= 7.5 | No fix listed |
| ibm lotus sametime | >= 8.0, < 8.0.1 | 8.0.1 |
| ibm lotus sametime | = 7.5.1-cf1 | No fix listed |
References
- 30309 third-party-advisory
- www-1.ibm.com vendor-advisory
- 29328 exploit third-party-advisory vdb-entry
- 1020093 third-party-advisory vdb-entry
- ADV-2008-1595 third-party-advisory vdb-entry
- www.zerodayinitiative.com third-party-advisory vdb-entry
- sametime-stmux-bo(42575) third-party-advisory vdb-entry