{
    "id": "CVE-2008-2499",
    "published": "2008-05-29 16:32:00",
    "last_modified": "2026-06-16 22:53:52",
    "cvss_score": "7.5",
    "cvss_severity": "HIGH",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
    "cwe": "CWE-119",
    "description": "Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL.",
    "epss_score": "0.77466",
    "epss_percentile": "0.99546",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-09-26 18:16:09",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "ibm",
            "product": "lotus_sametime"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "16696",
            "title": "IBM Lotus Domino Sametime - 'STMux.exe' Remote Stack Buffer Overflow (Metasploit)",
            "date": "2010-05-09",
            "url": "https://www.exploit-db.com/exploits/16696"
        },
        {
            "source": "exploit-db",
            "ref_id": "31820",
            "title": "IBM Lotus Sametime 8.0 - Multiplexer Buffer Overflow",
            "date": "2008-05-21",
            "url": "https://www.exploit-db.com/exploits/31820"
        }
    ],
    "refs_list": [
        "http://secunia.com/advisories/30309",
        "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21303920",
        "http://www.securityfocus.com/bid/29328",
        "http://www.securitytracker.com/id?1020093",
        "http://www.vupen.com/english/advisories/2008/1595/references",
        "http://www.zerodayinitiative.com/advisories/ZDI-08-028/",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/42575",
        "http://secunia.com/advisories/30309",
        "http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21303920",
        "http://www.securityfocus.com/bid/29328",
        "http://www.securitytracker.com/id?1020093",
        "http://www.vupen.com/english/advisories/2008/1595/references",
        "http://www.zerodayinitiative.com/advisories/ZDI-08-028/",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/42575"
    ]
}