Code injection

The client in Openwsman 1.2.0 and 2.0.0, in unknown configurations, allows remote Openwsman servers to replay SSL sessions via unspecified vectors...

Buffer overflow

Multiple buffer overflows in Openwsman 1.2.0 and 2.0.0 allow remote attackers to execute arbitrary code via a crafted "Authorization: Basic" HTTP header...

CVE-2008-2234

Multiple buffer overflows in Openwsman 1.2.0 and 2.0.0 allow remote attackers to execute arbitrary code via a crafted "Authorization: Basic" HTTP header...

CVE-2008-2233

The client in Openwsman 1.2.0 and 2.0.0, in unknown configurations, allows remote Openwsman servers to replay SSL sessions via unspecified vectors...

CVE-2008-2233

The client in Openwsman 1.2.0 and 2.0.0, in unknown configurations, allows remote Openwsman servers to replay SSL sessions via unspecified vectors...

CVE-2008-2234

Multiple buffer overflows in Openwsman 1.2.0 and 2.0.0 allow remote attackers to execute arbitrary code via a crafted "Authorization: Basic" HTTP header...

CVE-2008-2234

CVE-2008-2234 : Openwsman 1.2.0 and 2.0.0 contain remote buffer overflows when decoding the HTTP Basic Authentication header, allowing arbitrary code execution. VMware advisory notes remote code execution via Openwsman in ESXi/ESX 3.5 (patched to 2.0.0); NOS patches upgrade to Openwsman 2.1.0+ (E...

CVE-2008-2233

CVE-2008-2233 affects the Openwsman client (Openwsman 1.2.0 and 2.0.0). In the provided documents, the issue is described as allowing remote Openwsman servers to replay SSL sessions via unspecified vectors. Public documents show patches/fixes in openSUSE SUSE updates for libwsman-devel and relate...

CVE-2008-2234: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Openwsman 1.2.0 and 2.0.0 allow remote attackers to execute arbitrary code via a crafted "Authorization: Basic" HTTP header...

CVE-2008-2233: Improper Control of Generation of Code

The client in Openwsman 1.2.0 and 2.0.0, in unknown configurations, allows remote Openwsman servers to replay SSL sessions via unspecified vectors...

Buffer overflow

Buffer overflow in the openwsman management service in VMware ESXi 3.5 and ESX 3.5 allows remote authenticated users to gain privileges via an "invalid Content-Length."...

CVE-2008-2097

Buffer overflow in the openwsman management service in VMware ESXi 3.5 and ESX 3.5 allows remote authenticated users to gain privileges via an "invalid Content-Length."...

CVE-2008-2097

CVE-2008-2097 is a buffer overflow/privilege-escalation issue in the OpenWSMan management service used by VMware ESX/ESXi 3.5. The OpenWSMan component on ESX/ESXi 3.5 is vulnerable to privilege escalation via an invalid Content-Length, requiring local login credentials (non-privileged ESX/Virtual...

CVE-2008-2097: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the openwsman management service in VMware ESXi 3.5 and ESX 3.5 allows remote authenticated users to gain privileges via an "invalid Content-Length."...

openSUSE 10 Security Update : openwsman (openwsman-5241)

This update provides a fix for the included shttpd web-server to patch a buffer overflow vulnerability in the HTTP request parser. This bug can only be exploited by authenticated users to execute arbitrary code with the privileges of the openwsman/shttp daemon. CVE-2008-2097 %NASLMINLEVEL 70300 C...