CVE-2008-2097: Buffer Overflow
Published Jun 5, 2008
·Updated
Buffer overflow in the openwsman management service in VMware ESXi 3.5 and ESX 3.5 allows remote authenticated users to gain privileges via an "invalid Content-Length."
Affected Software
2 affected components
VMware ESX=3.5
VMware ESXi=3.5
Event History
Jun 5, 2008
CVE Published
via MITRE·08:21 PM
Data Sourced
via MITRE·08:21 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-2097?
CVE-2008-2097 is classified as a critical vulnerability due to the potential for remote authenticated users to gain elevated privileges.
2
How do I fix CVE-2008-2097?
To remediate CVE-2008-2097, it is recommended to update VMware ESXi and ESX to the latest versions that address this vulnerability.
3
Who is affected by CVE-2008-2097?
CVE-2008-2097 affects users of VMware ESXi and ESX versions 3.5.
4
What type of vulnerability is CVE-2008-2097?
CVE-2008-2097 is a buffer overflow vulnerability that can be exploited by sending an invalid Content-Length request.
5
Can CVE-2008-2097 be exploited remotely?
Yes, CVE-2008-2097 can be exploited remotely by authenticated users.