Exploitation Summary
EIP tracks 1 public exploit for CVE-2013-3975.
PoCs published by kicks4kittens, including Metasploit module auxiliary/gather/ibm_sametime_enumerate_users.
AI-analyzed exploit summary This Metasploit module performs user enumeration on IBM Lotus Notes Sametime by exploiting an information disclosure vulnerability (CVE-2013-3975). It supports both dictionary-based and brute-force attacks to extract usernames via the web interface.
Description
Unspecified vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to discover user names, full names, and e-mail addresses via a search.
Exploits (1)
This Metasploit module performs user enumeration on IBM Lotus Notes Sametime by exploiting an information disclosure vulnerability (CVE-2013-3975). It supports both dictionary-based and brute-force attacks to extract usernames via the web interface.