CVE-2007-5360: Buffer Overflow

Published Jan 8, 2008

Updated

Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUSUSEPAMSTANDALONEPROC defined, as used in VMWare ESX Server 3.0.1 and 3.0.2, might allow remote attackers to execute arbitrary code via vectors related to PAM authentication, a different vulnerability than CVE-2008-0003.

Affected Software

3 affected components

OpenPegasus Management server

VMware ESX=3.0.2

VMware ESX=3.0.1

Remediation

Patch Available

http://secunia.com/advisories/28358

Event History

Jan 8, 2008

CVE Published

08:46 PM

Jan 9, 2008

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5360?

CVE-2007-5360 is rated as a high severity vulnerability due to the potential for remote code execution.

How do I fix CVE-2007-5360?

To fix CVE-2007-5360, upgrade to the latest version of OpenPegasus Management server or apply the relevant patches provided by VMware.

What systems are affected by CVE-2007-5360?

CVE-2007-5360 affects OpenPegasus Management server compiled with PAM, and VMware ESX Server versions 3.0.1 and 3.0.2.

What type of vulnerability is CVE-2007-5360?

CVE-2007-5360 is a buffer overflow vulnerability that allows remote attackers to execute arbitrary code.

What are the potential impacts of CVE-2007-5360?

The potential impacts of CVE-2007-5360 include unauthorized access and execution of arbitrary commands on the affected system.