CVE-2008-3697: Input Validation
An unspecified ISAPI extension in VMware Server before 1.0.7 build 108231 allows remote attackers to cause a denial of service (IIS crash) via a malformed request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3697?
CVE-2008-3697 has a severity rating that indicates it can cause a denial of service, impacting the availability of the affected VMware Server versions.
How do I fix CVE-2008-3697?
To fix CVE-2008-3697, upgrade VMware Server to version 1.0.7 or later to mitigate the vulnerability.
What versions are affected by CVE-2008-3697?
CVE-2008-3697 affects VMware Server versions 1.0.1 through 1.0.6, including various builds in that range.
What type of attack does CVE-2008-3697 allow?
CVE-2008-3697 allows remote attackers to perform a denial of service attack that crashes the IIS server.
Is there a workaround for CVE-2008-3697?
While upgrading is the best fix for CVE-2008-3697, a potential workaround is to restrict access to the affected ISAPI extension.