IBM Lotus Sametime Multiplexer Buffer Overflow

high Nessus Plugin ID 70103

Language:

Synopsis

The remote server hosts an application that contains a buffer overflow vulnerability.

Description

The version of Lotus Sametime STMux.exe on the remote host is prone to a remote stack-based buffer overflow attack because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.

Solution

Upgrade to version 7.5.1CF2 / 8.0.1 or later.

Plugin Details

Severity: High

ID: 70103

File Name: lotus_sametime_stmux_buffer_overflow.nasl

Version: 1.7

Type: remote

Family: Misc.

Published: 9/24/2013

Updated: 7/14/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.2

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.2

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/a:ibm:lotus_sametime

Required KB Items: www/lotus_sametime

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 6/25/2008

Vulnerability Publication Date: 5/21/2008

Exploitable With

CANVAS (D2ExploitPack)

Core Impact

Metasploit (IBM Lotus Domino Sametime STMux.exe Stack Buffer Overflow)

Reference Information

CVE: CVE-2008-2499

BID: 29328

CWE: 119

Detections

Analytics