CVE-2008-3697 An unspecified ISAPI extension in VMware Server before 1.0.7 build 108231 allows remote attackers to cause a denial of service (IIS crash) via a malformed request.
MediumCVSS 5.0
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An unspecified ISAPI extension in VMware Server before 1.0.7 build 108231 allows remote attackers to cause a denial of service (IIS crash) via a malformed request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware server | = 1.0.1_build_29996 | No fix listed |
| VMware server | = 1.0.3 | No fix listed |
| VMware server | = 1.0.4_build_56528 | No fix listed |
| vmware server | <= 1.0.6 | No fix listed |
| vmware server | = 1.0 | No fix listed |
| vmware server | = 1.0.0 | No fix listed |
| vmware server | = 1.0.1 | No fix listed |
| vmware server | = 1.0.2 | No fix listed |
| vmware server | = 1.0.4 | No fix listed |
| vmware server | = 1.0.5 | No fix listed |
References
- 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues. mailing-list
- 31708 third-party-advisory vendor-advisory
- 4202 third-party-advisory
- 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues. mailing-list
- 30935 vdb-entry
- 1020789 vdb-entry
- www.vmware.com
- www.vmware.com
- ADV-2008-2466 vdb-entry
- vmware-isapi-extension-dos(44796) vdb-entry