What’s Vulnerable › Vulnerabilities

CVE-2008-3684

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2009-10-22 · updated 2026-06-16
• Weakness: CWE-119

Description

Heap-based buffer overflow in aws_tmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to execute arbitrary code via crafted packet data to TCP port 2606.

Affected products

• EMC Documentum Applicationxtender: through 5.40

References

• http://secunia.com/advisories/37070
• http://www.zerodayinitiative.com/advisories/ZDI-08-096/
• http://secunia.com/advisories/37070
• http://www.zerodayinitiative.com/advisories/ZDI-08-096/

Get alerted when CVE-2008-3684 or the next vulnerability affects your stack