CVE-2008-2499

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/30309Third Party Advisory
http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21303920Vendor Advisory
http://www.securityfocus.com/bid/29328Exploit, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1020093Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/1595/referencesThird Party Advisory
http://www.zerodayinitiative.com/advisories/ZDI-08-028/Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/42575Third Party Advisory, VDB Entry
http://secunia.com/advisories/30309Third Party Advisory
http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21303920Vendor Advisory
http://www.securityfocus.com/bid/29328Exploit, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1020093Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/1595/referencesThird Party Advisory
http://www.zerodayinitiative.com/advisories/ZDI-08-028/Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/42575Third Party Advisory, VDB Entry

Timeline

Published: May 29, 2008
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008