CVE-2008-2499

Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

77.47% chance of exploitation in the next 30 days, 100th percentile

Published

2008-05-29

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/lotus/domino_sametime_st…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/31820
• https://www.exploit-db.com/exploits/16696

References

• CVE Record
• NVD entry

Related

• CVE-2008-2496
• CVE-2008-2501
• CVE-2008-2493
• CVE-2008-2504
• CVE-2008-2492
• CVE-2008-2505