VULNERABILITY INTELLIGENCE

CVE-2008-0945

CVSS score3.5 LOW
EPSS probability6.88%
CISA KEVNot currently listed
Published2008-02-25
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:N/I:N/A:P

Description

Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in an IP address field.

Weakness classification

  • CWE-134: Use of Externally-Controlled Format String

Primary references