CVE-2013-3985: Undefined Security Weakness

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable...

CVE-2013-3044: Undefined Security Weakness

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges...

CVE-2013-3986

IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote attackers to cause a denial of service WebPlayer Firefox extension crash via a crafted Audio Visual AV session...

Session fixation

IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote attackers to cause a denial of service WebPlayer Firefox extension crash via a crafted Audio Visual AV session...

CVE-2013-3986

IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote attackers to cause a denial of service WebPlayer Firefox extension crash via a crafted Audio Visual AV session...

CVE-2013-3986

CVE-2013-3986 affects IBM Lotus Sametime 8.5.2 and 8.5.2.1. The vulnerability allows remote attackers to cause a denial-of-service by crafting an Audio Visual (AV) session that crashes the WebPlayer Firefox extension. Public details indicate exploitation targets the Sametime WebPlayer plug-in dur...

PT-2013-4772

Name of the Vulnerable Software and Affected Versions IBM Lotus Sametime versions 8.5.2 through 8.5.2.1 Description The issue allows remote attackers to cause a denial of service, specifically a crash of the WebPlayer Firefox extension, via a crafted Audio Visual AV session. Recommendations For...

CVE-2013-3986: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote attackers to cause a denial of service WebPlayer Firefox extension crash via a crafted Audio Visual AV session...

KLA10204 DoS vulnerability in IBM Lotus Sametime

An unspecified vulnerability was found in the IBM Lotus Sametime. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially desgined AV session. Original advisories - Exploitation Public exploits exist for this...

IBM Lotus Sametime WebPlayer DoS

This module exploits a known flaw in the IBM Lotus Sametime WebPlayer version 8.5.2.1392 and prior to cause a denial of service condition against specific users. For this module to function the target user must be actively logged into the IBM Lotus Sametime server and have the Sametime Audio Visu...

IBM Lotus Sametime Connect Client Password Disclosure

The version of IBM Lotus Sametime Connect installed on the remote Windows host is potentially affected by an information disclosure vulnerability. A flaw in the application causes client passwords to be stored in the clear on the client's memory. C Tenable Network Security, Inc...

IBM Lotus Sametime Multiplexer Buffer Overflow

The version of Lotus Sametime STMux.exe on the remote host is prone to a remote stack-based buffer overflow attack because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. C Tenable Network Security, Inc. include"compat.inc"; if...

IBM Lotus Sametime Connect Client Installed

IBM Lotus Sametime Connect Client, a communications client application, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70071; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

IBM Lotus Sametime Connect Client Mouseover XSS

The version of IBM Lotus Sametime Connect installed on the remote Windows host is 7.5 or 7.5.1. Such versions are potentially affected by a cross-site scripting vulnerability. By tricking a user into moving the mouse cursor over specially crafted content, an attacker could execute arbitrary scrip...

CVE-2013-0534

The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory...

Default credentials

The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory...

CVE-2013-0534

The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory...

CVE-2013-0534

Affected software: IBM Sametime Connect Client (versions 8.5.1 to 8.5.2.x as described) used with Lotus Notes client. Issue: Information disclosure via persistence of cleartext password strings in process memory. Root cause (as described): password data stored in memory in cleartext, enabling loc...

PT-2013-2410

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5.1 through 8.5.2.1 Description The issue allows local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory. Recommendations For IBM Sametime versions...

CVE-2013-0534: Undefined Security Weakness

The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory...