Description
Multiple buffer overflows in Openwsman 1.2.0 and 2.0.0 allow remote attackers to execute arbitrary code via a crafted "Authorization: Basic" HTTP header.
References
- 31410 third-party-advisory
- 31942 third-party-advisory
- 30694 vdb-entry
- ADV-2008-2624 vdb-entry
- http://www.vmware.com/security/advisories/VMSA-2008-0015.html
- openwsman-session-replay-code-execution(44484) vdb-entry
- ADV-2008-2397 vdb-entry
- [security-announce] 20080918 VMSA-2008-0015 Updated ESXi and ESX 3.5 packages address critical security issue in openwsman mailing-list
- 20080919 VMSA-2008-0015 Updated ESXi and ESX 3.5 packages address critical security issue in openwsman mailing-list
- openwsman-authentication-header-bo(44481) vdb-entry
- SUSE-SA:2008:041 vendor-advisory
- 31429 third-party-advisory