Description
Buffer overflow in the openwsman management service in VMware ESXi 3.5 and ESX 3.5 allows remote authenticated users to gain privileges via an "invalid Content-Length."
References
- ADV-2008-1744 vdb-entry
- SUSE-SR:2008:012 vendor-advisory
- http://www.vmware.com/security/advisories/VMSA-2008-0009.html
- 30556 third-party-advisory
- oval:org.mitre.oval:def:5640 vdb-entry signature
- 1020199 vdb-entry
- 29547 vdb-entry
- 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues mailing-list
- oval:org.mitre.oval:def:5759 vdb-entry signature
- 3922 third-party-advisory
- vmware-openwsman-privilege-escalation(42875) vdb-entry
- 30581 third-party-advisory