CVE-2008-2234 Multiple buffer overflows in Openwsman 1.2.0 and 2.0.0 allow remote attackers to execute arbitrary code via a crafted "Authorization: Basic" HTTP header.
HighCVSS 7.5
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in Openwsman 1.2.0 and 2.0.0 allow remote attackers to execute arbitrary code via a crafted "Authorization: Basic" HTTP header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openwsman | = 1.2.0 | No fix listed |
| openwsman | = 2.0.0 | No fix listed |
References
- SUSE-SA:2008:041 vendor-advisory
- [security-announce] 20080918 VMSA-2008-0015 Updated ESXi and ESX 3.5 packages address critical security issue in openwsman mailing-list
- 31410 third-party-advisory
- 31429 third-party-advisory
- 31942 third-party-advisory
- 20080919 VMSA-2008-0015 Updated ESXi and ESX 3.5 packages address critical security issue in openwsman mailing-list
- 30694 vdb-entry
- www.vmware.com
- ADV-2008-2397 vdb-entry
- ADV-2008-2624 vdb-entry
- openwsman-authentication-header-bo(44481) vdb-entry
- openwsman-session-replay-code-execution(44484) vdb-entry