Unscored severity · published Feb 25, 2008
CVE-2008-0945
Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated…
–
CVSS
6.9%
EPSS
No
On KEV
Description
Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in an IP address field.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.9% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Imserver · Ipswitch
through 2.0.8.1 · source: NVD
IM
Instant Messaging · Ipswitch
through 2.0.8.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0945
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0945
aluigi.altervista.org
http://aluigi.altervista.org/adv/ipsimene-adv.txt
aluigi.org
http://aluigi.org/poc/ipsimene.zip
Vendor Advisory
http://secunia.com/advisories/28824
securityreason.com
http://securityreason.com/securityalert/3697
www.securityfocus.com
http://www.securityfocus.com/archive/1/487748/100/200/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/27677
More from Imserver
–
CVE-2008-0946
Directory traversal vulnerability in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to create…
–
CVE-2007-3959
The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to…