CVE-2002-0814 - Buffer overflow in VMware Authorization Service for VMware GSX Server 2.0.0 build-2050 allows remote

CVE-2002-0814

Summary

Buffer overflow in VMware Authorization Service for VMware GSX Server 2.0.0 build-2050 allows remote authenticated users to execute arbitrary code via a long GLOBAL argument.

References

http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0057.html
http://marc.info/?l=bugtraq&m=102752511030425&w=2
http://marc.info/?l=bugtraq&m=102765223418716&w=2
http://www.iss.net/security_center/static/9663.php
http://www.securityfocus.com/bid/5294
http://www.vmware.com/download/gsx_security.html

Vulnerable Configurations

cpe:2.3:a:vmware:gsx_server:2.0.0_build_2050:*:*:*:*:*:*:*
cpe:2.3:a:vmware:gsx_server:2.0.0_build_2050:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 18-10-2016 - 02:22)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	5294
bugtraq	20020724 VMware GSX Server Remote Buffer Overflow 20020726 Re: VMware GSX Server Remote Buffer Overflow
confirm	http://www.vmware.com/download/gsx_security.html
ntbugtraq	20020805 VMware GSX Server 2.0.1 Release and Security Alert
xf	vmware-gsx-auth-bo(9663)

Last major update

18-10-2016 - 02:22

Published

12-08-2002 - 04:00

Last modified

18-10-2016 - 02:22