ID CVE-2007-1271
Summary Buffer overflow in VMware ESX Server 3.0.0 and 3.0.1 might allow attackers to gain privileges or cause a denial of service (application crash) via unspecified vectors.
References
Vulnerable Configurations
  • cpe:2.3:o:vmware:esx:3.0.0:*:*:*:*:*:*:*
    cpe:2.3:o:vmware:esx:3.0.0:*:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esx:3.0.1:*:*:*:*:*:*:*
    cpe:2.3:o:vmware:esx:3.0.1:*:*:*:*:*:*:*
CVSS
Base: 6.6 (as of 30-10-2018 - 16:26)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL MEDIUM SINGLE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:M/Au:S/C:C/I:C/A:C
oval via4
accepted 2010-08-16T04:10:48.730-04:00
class vulnerability
contributors
  • name Michael Wood
    organization Hewlett-Packard
  • name Michael Wood
    organization Hewlett-Packard
  • name Jonathan Baker
    organization The MITRE Corporation
definition_extensions
  • comment VMWare ESX Server 3.0.1 is installed
    oval oval:org.mitre.oval:def:5367
  • comment VMWare ESX Server 3.0.0 is installed
    oval oval:org.mitre.oval:def:5501
description Buffer overflow in VMware ESX Server 3.0.0 and 3.0.1 might allow attackers to gain privileges or cause a denial of service (application crash) via unspecified vectors.
family unix
id oval:org.mitre.oval:def:5552
status accepted
submitted 2008-04-25T15:10:44.000-05:00
title VMware ESX Multiple Code Execution and Denial of Service Vulnerabilities
version 7
refmap via4
bid 23322
bugtraq 20070404 VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates
confirm
sectrack 1017875
secunia 24788
sreason 2524
vupen ADV-2007-1267
Last major update 30-10-2018 - 16:26
Published 06-04-2007 - 00:19
Last modified 30-10-2018 - 16:26
Back to Top