Unrated severityNVD Advisory· Published May 22, 2008· Updated Jun 16, 2026
CVE-2008-2240
CVE-2008-2240
Description
Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long Accept-Language HTTP header.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:ibm:lotus_domino:6.0:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:ibm:lotus_domino:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:6.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.0.1:*:*:*:*:*:*:*
- (no CPE)range: <7.0.3 FP1, 8.x <8.0.1
Patches
Vulnerability mechanics
References
10- www-1.ibm.com/support/docview.wssnvdPatch
- www.mwrinfosecurity.com/publications/mwri_ibm-lotus-domino-accept-language-stack-overflow_2008-05-20.pdfnvdPatch
- secunia.com/advisories/30310nvdVendor Advisory
- secunia.com/advisories/30332nvdVendor Advisory
- www.attrition.org/pipermail/vim/2008-May/001988.htmlnvd
- www.attrition.org/pipermail/vim/2008-May/001989.htmlnvd
- www.securityfocus.com/bid/29310nvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2008/1597nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/42552nvd
News mentions
0No linked articles in our index yet.