CVE-2008-1364
published 2008-03-20CVE-2008-1364: Unspecified vulnerability in the DHCP service in VMware Workstation 5.5.x before 5.5.6, VMware Player 1.0.x before 1.0.6, VMware ACE 1.0.x before 1.0.5, VMware…
PriorityP427high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
2.04%
78.9th percentile
Unspecified vulnerability in the DHCP service in VMware Workstation 5.5.x before 5.5.6, VMware Player 1.0.x before 1.0.6, VMware ACE 1.0.x before 1.0.5, VMware Server 1.0.x before 1.0.5, and VMware Fusion 1.1.x before 1.1.1 allows attackers to cause a denial of service.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | ace | — | — |
| vmware | ace | — | — |
| vmware | player | — | — |
| vmware | player | — | — |
| vmware | player | — | — |
| vmware | player | — | — |
| vmware | player | — | — |
| vmware | player | — | — |
| vmware | player | — | — |
| vmware | server | — | — |
| vmware | vmware_fusion | — | — |
| vmware | vmware_server | — | — |
| vmware | vmware_server | — | — |
| vmware | vmware_workstation | — | — |
| vmware | vmware_workstation | — | — |
| vmware | vmware_workstation | — | — |
| vmware | vmware_workstation | — | — |
| vmware | workstation | — | — |
| vmware | workstation | — | — |
| vmware | workstation | — | — |
| vmware | workstation | — | — |
| vmware | workstation | — | — |
| vmware | workstation | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-87x3-7r3j-qmpp: Unspecified vulnerability in the DHCP service in VMware Workstation 5
ghsa_unreviewed·2022-05-01
CVE-2008-1364 [HIGH] GHSA-87x3-7r3j-qmpp: Unspecified vulnerability in the DHCP service in VMware Workstation 5
Unspecified vulnerability in the DHCP service in VMware Workstation 5.5.x before 5.5.6, VMware Player 1.0.x before 1.0.6, VMware ACE 1.0.x before 1.0.5, VMware Server 1.0.x before 1.0.5, and VMware Fusion 1.1.x before 1.1.1 allows attackers to cause a denial of service.
VMware
Several critical security vulnerabilities have been addressed in the newest releases of VMware's hosted product line
vendor_vmware·2008-03-17·CVSS 6.9
CVE-2006-2937 [MEDIUM] Several critical security vulnerabilities have been addressed in the newest releases of VMware's hosted product line
VMSA-2008-0005: Several critical security vulnerabilities have been addressed in the newest releases of VMware's hosted product line
a. Host to guest shared folder (HGFS) traversal vulnerability On Windows hosts, if you have configured a VMware host to guest shared folder (HGFS), it is possible for a program running in the guest to gain access to the host's file system and create or modify executable files in sensitive locations. NOTE: VMware Server is not affected because it doesn't use host to guest shared folders. No versions of ESX Server, including ESX Server 3i, are affected by this vulnerability. Because ESX Server is based on a bare-metal hypervisor architecture and not a hosted architecture, and it doesn't include any shared folder abilities. Fusion and Linux based hosted product
Red Hat
CVE-2008-1364: Unspecified vulnerability in the DHCP service in VMware Workstation 5
vendor_redhat·CVSS 7.8
CVE-2008-1364 [HIGH] CVE-2008-1364: Unspecified vulnerability in the DHCP service in VMware Workstation 5
Unspecified vulnerability in the DHCP service in VMware Workstation 5.5.x before 5.5.6, VMware Player 1.0.x before 1.0.6, VMware ACE 1.0.x before 1.0.5, VMware Server 1.0.x before 1.0.5, and VMware Fusion 1.1.x before 1.1.1 allows attackers to cause a denial of service.
Statement: Not vulnerable. This issue did not affect the versions of dhcp as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.vmware.com/pipermail/security-announce/2008/000008.htmlhttp://security.gentoo.org/glsa/glsa-201209-25.xmlhttp://securityreason.com/securityalert/3755http://securitytracker.com/id?1019623http://www.securityfocus.com/archive/1/489739/100/0/threadedhttp://www.securityfocus.com/bid/28276http://www.securityfocus.com/bid/28289http://www.vmware.com/security/advisories/VMSA-2008-0005.htmlhttp://www.vmware.com/support/fusion/doc/releasenotes_fusion.htmlhttp://www.vmware.com/support/player/doc/releasenotes_player.htmlhttp://www.vmware.com/support/server/doc/releasenotes_server.htmlhttp://www.vmware.com/support/ws55/doc/releasenotes_ws55.htmlhttp://www.vupen.com/english/advisories/2008/0905/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/41254http://lists.vmware.com/pipermail/security-announce/2008/000008.htmlhttp://security.gentoo.org/glsa/glsa-201209-25.xmlhttp://securityreason.com/securityalert/3755http://securitytracker.com/id?1019623http://www.securityfocus.com/archive/1/489739/100/0/threadedhttp://www.securityfocus.com/bid/28276http://www.securityfocus.com/bid/28289http://www.vmware.com/security/advisories/VMSA-2008-0005.htmlhttp://www.vmware.com/support/fusion/doc/releasenotes_fusion.htmlhttp://www.vmware.com/support/player/doc/releasenotes_player.htmlhttp://www.vmware.com/support/server/doc/releasenotes_server.htmlhttp://www.vmware.com/support/ws55/doc/releasenotes_ws55.htmlhttp://www.vupen.com/english/advisories/2008/0905/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/41254
2008-03-20
Published