{"uuid": "a76df903-6fef-4888-bb24-8778dfdb615d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-2499", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/lotus/domino_sametime_stmux.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"aushack \", \"riaf \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow in Lotus Domino\\\\'s Sametime\\n          Server. By sending an overly long POST request to the Multiplexer\\n          STMux.exe service we are able to overwrite SEH. Based on the exploit\\n          by Manuel Santamarina Suarez.\", \"disclosure_date\": \"2008-05-21\", \"fullname\": \"exploit/windows/lotus/domino_sametime_stmux\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:58 +0000\", \"name\": \"IBM Lotus Domino Sametime STMux.exe Stack Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/lotus/domino_sametime_stmux.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 200, \"ref_name\": \"windows/lotus/domino_sametime_stmux\", \"references\": [\"CVE-2008-2499\", \"OSVDB-45610\", \"BID-29328\", \"ZDI-08-028\", \"ATT&CK-T1210\"], \"rport\": 1533, \"session_types\": false, \"targets\": [\"Lotus Sametime 7.5 on Windows Server 2000 SP4\", \"Lotus Sametime 7.5 on Windows Server 2003 SP1\", \"Lotus Sametime 7.5 on Windows Server 2003 SP2\", \"Lotus Sametime 7.5.1  Windows Server 2003 SP2\", \"Lotus Sametime 8.0.0  Windows Server 2003 SP2\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:13.874272Z"}