TUCoPS :: IBM(multi) :: bx3273.htm

TUCoPS :: IBM(multi) :: bx3273.htm
IBM Lotus Sametime Community Services Multiplexer Stack Overflow Vulnerability
ZDI-08-028: IBM Lotus Sametime Community Services Multiplexer Stack Overflow Vulnerability ZDI-08-028: IBM Lotus Sametime Community Services Multiplexer Stack Overflow Vulnerability

WkRJLTA4LTAyODogSUJNIExvdHVzIFNhbWV0aW1lIENvbW11bml0eSBTZXJ2aWNlcyBNdWx0aXBs
ZXhlciBTdGFjayANCk92ZXJmbG93IFZ1bG5lcmFiaWxpdHkNCmh0dHA6Ly93d3cuemVyb2RheWlu
aXRpYXRpdmUuY29tL2Fkdmlzb3JpZXMvWkRJLTA4LTAyOA0KTWF5IDIxLCAyMDA4DQoNCi0tIEFm
ZmVjdGVkIFZlbmRvcnM6DQpJQk0NCg0KLS0gQWZmZWN0ZWQgUHJvZHVjdHM6DQpJQk0gTG90dXMg
U2FtZXRpbWUNCg0KLS0gVGlwcGluZ1BvaW50KFRNKSBJUFMgQ3VzdG9tZXIgUHJvdGVjdGlvbjoN
ClRpcHBpbmdQb2ludCBJUFMgY3VzdG9tZXJzIGhhdmUgYmVlbiBwcm90ZWN0ZWQgYWdhaW5zdCB0
aGlzDQp2dWxuZXJhYmlsaXR5IGJ5IERpZ2l0YWwgVmFjY2luZSBwcm90ZWN0aW9uIGZpbHRlciBJ
RCA1NjA3LCA1Njk4LiANCkZvciBmdXJ0aGVyIHByb2R1Y3QgaW5mb3JtYXRpb24gb24gdGhlIFRp
cHBpbmdQb2ludCBJUFMsIHZpc2l0Og0KDQogICAgaHR0cDovL3d3dy50aXBwaW5ncG9pbnQuY29t
DQoNCi0tIFZ1bG5lcmFiaWxpdHkgRGV0YWlsczoNClRoaXMgdnVsbmVyYWJpbGl0eSBhbGxvd3Mg
cmVtb3RlIGF0dGFja2VycyB0byBleGVjdXRlIGFyYml0cmFyeSBjb2RlIG9uDQp2dWxuZXJhYmxl
IGluc3RhbGxhdGlvbnMgb2YgSUJNIExvdHVzIFNhbWV0aW1lLiBBdXRoZW50aWNhdGlvbiBpcyBu
b3QNCnJlcXVpcmVkIHRvIGV4cGxvaXQgdGhpcyB2dWxuZXJhYmlsaXR5Lg0KDQpUaGUgc3BlY2lm
aWMgZmxhdyBleGlzdHMgaW4gdGhlIGhhbmRsaW5nIG9mIGxvbmcgVVJMcyBpbiB0aGUgQ29tbXVu
aXR5DQpTZXJ2aWNlcyBNdWx0aXBsZXhlciAoU3RNdXguZXhlKSBsaXN0ZW5pbmcgb24gVENQIHBv
cnQgMTUzMy4gQSBzcGVjaWFsbHkNCmNyYWZ0ZWQgVVJMIGNhbiBiZSBwYXNzZWQgaW50byBhIHZ1
bG5lcmFibGUgc3NjYW5mKCkgZnVuY3Rpb24gdGhhdCB3aWxsDQpyZXN1bHQgaW4gYSBzdGFjayBv
dmVyZmxvdyByZXN1bHRpbmcgaW4gdGhlIGFiaWxpdHkgdG8gZXhlY3V0ZSBhcmJpdHJhcnkNCmNv
ZGUuIA0KDQotLSBWZW5kb3IgUmVzcG9uc2U6DQpJQk0gaGFzIGlzc3VlZCBhbiB1cGRhdGUgdG8g
Y29ycmVjdCB0aGlzIHZ1bG5lcmFiaWxpdHkuIE1vcmUNCmRldGFpbHMgY2FuIGJlIGZvdW5kIGF0
Og0KDQpodHRwOi8vd3d3LmlibS5jb20vc3VwcG9ydC9kb2N2aWV3Lndzcz9ycz00NjMmYW1wO3Vp
ZD1zd2cyMTMwMzkyMA0KDQotLSBEaXNjbG9zdXJlIFRpbWVsaW5lOg0KMjAwNy0xMi0xMSAtIFZ1
bG5lcmFiaWxpdHkgcmVwb3J0ZWQgdG8gdmVuZG9yDQoyMDA4LTA1LTIxIC0gQ29vcmRpbmF0ZWQg
cHVibGljIHJlbGVhc2Ugb2YgYWR2aXNvcnkNCg0KLS0gQ3JlZGl0Og0KVGhpcyB2dWxuZXJhYmls
aXR5IHdhcyBkaXNjb3ZlcmVkIGJ5Og0KICAgICogTWFudWVsIFNhbnRhbWFyaW5hIFN1YXJleg0K
DQotLSBBYm91dCB0aGUgWmVybyBEYXkgSW5pdGlhdGl2ZSAoWkRJKToNCkVzdGFibGlzaGVkIGJ5
IFRpcHBpbmdQb2ludCwgVGhlIFplcm8gRGF5IEluaXRpYXRpdmUgKFpESSkgcmVwcmVzZW50cyAN
CmEgYmVzdC1vZi1icmVlZCBtb2RlbCBmb3IgcmV3YXJkaW5nIHNlY3VyaXR5IHJlc2VhcmNoZXJz
IGZvciByZXNwb25zaWJseQ0KZGlzY2xvc2luZyBkaXNjb3ZlcmVkIHZ1bG5lcmFiaWxpdGllcy4N
Cg0KUmVzZWFyY2hlcnMgaW50ZXJlc3RlZCBpbiBnZXR0aW5nIHBhaWQgZm9yIHRoZWlyIHNlY3Vy
aXR5IHJlc2VhcmNoDQp0aHJvdWdoIHRoZSBaREkgY2FuIGZpbmQgbW9yZSBpbmZvcm1hdGlvbiBh
bmQgc2lnbi11cCBhdDoNCg0KICAgIGh0dHA6Ly93d3cuemVyb2RheWluaXRpYXRpdmUuY29tDQoN
ClRoZSBaREkgaXMgdW5pcXVlIGluIGhvdyB0aGUgYWNxdWlyZWQgdnVsbmVyYWJpbGl0eSBpbmZv
cm1hdGlvbiBpcw0KdXNlZC4gVGlwcGluZ1BvaW50IGRvZXMgbm90IHJlLXNlbGwgdGhlIHZ1bG5l
cmFiaWxpdHkgZGV0YWlscyBvciBhbnkNCmV4cGxvaXQgY29kZS4gSW5zdGVhZCwgdXBvbiBub3Rp
ZnlpbmcgdGhlIGFmZmVjdGVkIHByb2R1Y3QgdmVuZG9yLA0KVGlwcGluZ1BvaW50IHByb3ZpZGVz
IGl0cyBjdXN0b21lcnMgd2l0aCB6ZXJvIGRheSBwcm90ZWN0aW9uIHRocm91Z2gNCml0cyBpbnRy
dXNpb24gcHJldmVudGlvbiB0ZWNobm9sb2d5LiBFeHBsaWNpdCBkZXRhaWxzIHJlZ2FyZGluZyB0
aGUNCnNwZWNpZmljcyBvZiB0aGUgdnVsbmVyYWJpbGl0eSBhcmUgbm90IGV4cG9zZWQgdG8gYW55
IHBhcnRpZXMgdW50aWwNCmFuIG9mZmljaWFsIHZlbmRvciBwYXRjaCBpcyBwdWJsaWNseSBhdmFp
bGFibGUuIEZ1cnRoZXJtb3JlLCB3aXRoIHRoZQ0KYWx0cnVpc3RpYyBhaW0gb2YgaGVscGluZyB0
byBzZWN1cmUgYSBicm9hZGVyIHVzZXIgYmFzZSwgVGlwcGluZ1BvaW50DQpwcm92aWRlcyB0aGlz
IHZ1bG5lcmFiaWxpdHkgaW5mb3JtYXRpb24gY29uZmlkZW50aWFsbHkgdG8gc2VjdXJpdHkNCnZl
bmRvcnMgKGluY2x1ZGluZyBjb21wZXRpdG9ycykgd2hvIGhhdmUgYSB2dWxuZXJhYmlsaXR5IHBy
b3RlY3Rpb24gb3INCm1pdGlnYXRpb24gcHJvZHVjdC4NCg0KT3VyIHZ1bG5lcmFiaWxpdHkgZGlz
Y2xvc3VyZSBwb2xpY3kgaXMgYXZhaWxhYmxlIG9ubGluZSBhdDoNCg0KICAgIGh0dHA6Ly93d3cu
emVyb2RheWluaXRpYXRpdmUuY29tL2Fkdmlzb3JpZXMvZGlzY2xvc3VyZV9wb2xpY3kvDQoNCkNP
TkZJREVOVElBTElUWSBOT1RJQ0U6IFRoaXMgZS1tYWlsIG1lc3NhZ2UsIGluY2x1ZGluZyBhbnkg
YXR0YWNobWVudHMsDQppcyBiZWluZyBzZW50IGJ5IDNDb20gZm9yIHRoZSBzb2xlIHVzZSBvZiB0
aGUgaW50ZW5kZWQgcmVjaXBpZW50KHMpIGFuZA0KbWF5IGNvbnRhaW4gY29uZmlkZW50aWFsLCBw
cm9wcmlldGFyeSBhbmQvb3IgcHJpdmlsZWdlZCBpbmZvcm1hdGlvbi4NCkFueSB1bmF1dGhvcml6
ZWQgcmV2aWV3LCB1c2UsIGRpc2Nsb3N1cmUgYW5kL29yIGRpc3RyaWJ1dGlvbiBieSBhbnkgDQpy
ZWNpcGllbnQgaXMgcHJvaGliaXRlZC4gIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNp
cGllbnQsIHBsZWFzZQ0KZGVsZXRlIGFuZC9vciBkZXN0cm95IGFsbCBjb3BpZXMgb2YgdGhpcyBt
ZXNzYWdlIHJlZ2FyZGxlc3Mgb2YgZm9ybSBhbmQNCmFueSBpbmNsdWRlZCBhdHRhY2htZW50cyBh
bmQgbm90aWZ5IDNDb20gaW1tZWRpYXRlbHkgYnkgY29udGFjdGluZyB0aGUNCnNlbmRlciB2aWEg
cmVwbHkgZS1tYWlsIG9yIGZvcndhcmRpbmcgdG8gM0NvbSBhdCBwb3N0bWFzdGVyQDNjb20uY29t
LiANCg=