CVE-2008-2097

CVE-2008-2097 is a buffer overflow/privilege-escalation issue in the OpenWSMan management service used by VMware ESX/ESXi 3.5. The OpenWSMan component on ESX/ESXi 3.5 is vulnerable to privilege escalation via an invalid Content-Length, requiring local login credentials (non-privileged ESX/Virtual...

openSUSE 10 Security Update : openwsman (openwsman-5241)

This update provides a fix for the included shttpd web-server to patch a buffer overflow vulnerability in the HTTP request parser. This bug can only be exploited by authenticated users to execute arbitrary code with the privileges of the openwsman/shttp daemon. CVE-2008-2097 %NASLMINLEVEL 70300 C...