KLA10203 ACE vulnerability in IBM Lotus Sametime

An unspecified vulnerability was found in IBM Lotus Sametime. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed URL.

Original advisories

Related products

IBM-Lotus-Sametime

CVE list

CVE-2008-2499 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• IBM Lotus Sametime versions 7.5.1.1 and earlierIBM Lotus Sametime 8 versions 8.0.0.9 and earlier