CVE-2008-2240: Buffer Overflow
Published May 22, 2008
·Updated
Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long Accept-Language HTTP header.
Affected Software
5 affected components
IBM Lotus Domino=6.0
IBM Lotus Domino=6.5
IBM Lotus Domino=7.0
IBM Lotus Domino=8.0
IBM Lotus Domino=8.0.1
Remediation
Patch Available
Event History
May 22, 2008
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-2240?
CVE-2008-2240 is classified as a high severity vulnerability due to its potential to allow remote code execution and cause denial of service.
2
How do I fix CVE-2008-2240?
To mitigate CVE-2008-2240, update IBM Lotus Domino to version 7.0.3 FP1 or 8.0.1 or later.
3
Which versions of IBM Lotus Domino are affected by CVE-2008-2240?
CVE-2008-2240 affects IBM Lotus Domino versions 6.0, 6.5, 7.0, and 8.0 prior to 8.0.1.
4
What type of vulnerability is CVE-2008-2240?
CVE-2008-2240 is a stack-based buffer overflow vulnerability.
5
Can CVE-2008-2240 lead to a denial of service?
Yes, CVE-2008-2240 can cause a denial of service by crashing the daemon.