VulnerabilityModified

CVE-2008-2499

Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL.

HIGH 7.5EPSS 77.5%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 77.5%, higher than 100% of all known CVEs. Patch or mitigate before the next change window.

Description

CVSS 2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 77.47% probability · 100th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: ibm/lotus sametime
Source: cve@mitre.org

References

http://secunia.com/advisories/30309Third Party Advisory
http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21303920Vendor Advisory
http://www.securityfocus.com/bid/29328Exploit, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1020093Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/1595/referencesThird Party Advisory
http://www.zerodayinitiative.com/advisories/ZDI-08-028/Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/42575Third Party Advisory, VDB Entry
http://secunia.com/advisories/30309Third Party Advisory
http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21303920Vendor Advisory
http://www.securityfocus.com/bid/29328Exploit, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1020093Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/1595/referencesThird Party Advisory
http://www.zerodayinitiative.com/advisories/ZDI-08-028/Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/42575Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.