CVE-2008-2097 Buffer overflow in the openwsman management service in VMware ESXi 3.5 and ESX 3.5 allows remote authenticated users to gain privileges via an "invalid Content-Length."
HighCVSS 9.0
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the openwsman management service in VMware ESXi 3.5 and ESX 3.5 allows remote authenticated users to gain privileges via an "invalid Content-Length."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware ESX | = 3.5 | No fix listed |
| VMware esxi | = 3.5 | No fix listed |
References
- SUSE-SR:2008:012 vendor-advisory
- 30556 third-party-advisory vendor-advisory
- 30581 third-party-advisory vendor-advisory
- 3922 third-party-advisory
- 1020199 vdb-entry
- 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues mailing-list
- 29547 vdb-entry
- www.vmware.com vendor-advisory
- ADV-2008-1744 vdb-entry vendor-advisory
- vmware-openwsman-privilege-escalation(42875) vdb-entry
- oval:org.mitre.oval:def:5640 signature vdb-entry
- oval:org.mitre.oval:def:5759 signature vdb-entry