CVE-2008-3697

CWE-20 — Improper Input Validation3 documents3 sources
Severity
5.0MEDIUM
EPSS
3.2%
top 13.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Vmware Vmware ServerVmware Server
Timeline
PublishedSep 3
Latest updateMay 2

Description

An unspecified ISAPI extension in VMware Server before 1.0.7 build 108231 allows remote attackers to cause a denial of service (IIS crash) via a malformed request.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDvmware/server1.0.1_build_29996, 1.0.3, 1.0.4_build_56528+2

🔴Vulnerability Details

2
GHSA
GHSA-w7x3-rwmf-hc38: An unspecified ISAPI extension in VMware Server before 1↗2022-05-02
▶
CVEList
CVE-2008-3697: An unspecified ISAPI extension in VMware Server before 1↗2008-09-03
▶
CVE-2008-3697 (MEDIUM CVSS 5) | An unspecified ISAPI extension in V | cvebase.io