Unrated severityNVD Advisory· Published May 29, 2008· Updated Jun 16, 2026

CVE-2008-2499

Description

Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Sametime3 versions
cpe:2.3:a:ibm:lotus_sametime:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ibm:lotus_sametime:*:*:*:*:*:*:*:*range: <=7.5
- cpe:2.3:a:ibm:lotus_sametime:7.5.1:cf1:*:*:*:*:*:*
- (no CPE)range: 7.5.1 CF1 and earlier, and 8.x before 8.0.1

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/29328nvdExploitThird Party AdvisoryVDB Entry
secunia.com/advisories/30309nvdThird Party Advisory
www-1.ibm.com/support/docview.wssnvdVendor Advisory
www.securitytracker.com/idnvdThird Party AdvisoryVDB Entry
www.vupen.com/english/advisories/2008/1595/referencesnvdThird Party Advisory
www.zerodayinitiative.com/advisories/ZDI-08-028/nvdThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/42575nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.062
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000