CVE-2008-2240

Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8...

10.0 HighPublic exploit

Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long Accept-Language HTTP header.

Exploit likelihood

64.8%Down 2.5 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Record: CVE-2008-2240
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-2240
Updated: 2026-11-02

EUVDEUVD-2008-2237 No score

Record: EUVD-2008-2237
Updated: 2026-11-03

GitHub AdvisoriesGHSA-p4g3-m75g-v8cw No score

Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8...

Record: GHSA-p4g3-m75g-v8cw
Weakness: CWE-119
Updated: 2026-11-02

Affected products

ibm lotus domino

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	IBM Lotus Domino Web Server - Accept-Language Stack Buffer Overflow (Metasploit)	2010-11-11
Metasploit	IBM Lotus Domino Web Server Accept-Language Stack Buffer Overflow	2008-05-20

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-2240 is a high vulnerability (CVSS 10.0) in Ibm Lotus Domino, published May 22, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 64.8%, the 99th percentile. No source names a fixed version.

References

Show 6 moreShow less