CVE-2008-3684: Heap-based buffer overflow in aws_tmxn.exe in the Admin Agent service in the server in EMC Documentum Appli...

Security readout for executives and security teams

CVE-2008-3684 is a remote code execution risk in EMC Documentum ApplicationXtender Workflow’s server Admin Agent service. A crafted network packet sent to TCP port 2606 could trigger a heap buffer overflow in aws_tmxn.exe. The exact affected version range and vendor fix are not confirmed in the provided sources. Exposure is likely limited to organizations still running EMC Documentum ApplicationXtender Workflow with the Admin Agent service reachable on TCP port 2606. Internet-facing or broadly accessible internal instances carry the greatest business risk. The affected version range is uncertain in the source bundle. Treat this as a high-priority legacy exposure issue if ApplicationXtender Workflow is still deployed. The business concern is remote compromise of a server-side administrative service. Priority depends on whether TCP/2606 is reachable from untrusted networks. Mitigation focus: Identify any ApplicationXtender Workflow servers running the Admin Agent service.; Check vendor or successor vendor guidance for supported fixes or upgrades.; Restrict TCP port 2606 to trusted administrative networks only..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.