CVE-2008-0945: Low severity ipswitch imserver vulnerability

Q: What is the severity of CVE-2008-0945?

CVE-2008-0945 has a medium severity rating due to its potential to cause a denial of service.

Q: How do I fix CVE-2008-0945?

To fix CVE-2008-0945, upgrade to a version of Ipswitch Instant Messaging later than 2.0.8.1.

Q: Who is affected by CVE-2008-0945?

CVE-2008-0945 affects authenticated users of Ipswitch Instant Messaging version 2.0.8.1 and earlier.

Q: What impact can CVE-2008-0945 have?

CVE-2008-0945 can lead to a daemon crash and may have unspecified other impacts.

Q: What software is impacted by CVE-2008-0945?

CVE-2008-0945 impacts the IM Server in Ipswitch Instant Messaging versions up to and including 2.0.8.1.

Published Feb 25, 2008

Updated

Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in an IP address field.

Affected Software

2 affected components

Ipswitch IMserver<=2.0.8.1

Ipswitch Instant Messaging<=2.0.8.1

Event History

Feb 25, 2008

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-0945?

CVE-2008-0945 has a medium severity rating due to its potential to cause a denial of service.

How do I fix CVE-2008-0945?

To fix CVE-2008-0945, upgrade to a version of Ipswitch Instant Messaging later than 2.0.8.1.

Who is affected by CVE-2008-0945?

CVE-2008-0945 affects authenticated users of Ipswitch Instant Messaging version 2.0.8.1 and earlier.

What impact can CVE-2008-0945 have?

CVE-2008-0945 can lead to a daemon crash and may have unspecified other impacts.

What software is impacted by CVE-2008-0945?