Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2007-0062
HistorySep 21, 2007 - 7:17 p.m.

CVE-2007-0062

2007-09-2119:17:00
CWE-119
CWE-189
[email protected]
web.nvd.nist.gov
46
isc dhcpd
vmware workstation
dhcp server
remote attackers
denial of service
execute arbitrary code
cve-2007-0062

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.311 Low

EPSS

Percentile

97.0%

JSON

Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528; allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a malformed DHCP packet with a large dhcp-max-message-size that triggers a stack-based buffer overflow, related to servers configured to send many DHCP options to clients.

Affected configurations

NVD
Node
vmwareaceMatch1.0.3
OR
vmwareaceMatch2.0
OR
vmwareplayerMatch1.0.4
OR
vmwareplayerMatch2.0
OR
vmwareserverMatch1.0.3
OR
vmwarevmware_workstationMatch6.0.1
OR
vmwareworkstationMatch3.4
OR
vmwareworkstationMatch4.0
OR
vmwareworkstationMatch4.0.1
OR
vmwareworkstationMatch4.0.2
OR
vmwareworkstationMatch4.5.2
OR
vmwareworkstationMatch5.5.0_build_13124
OR
vmwareworkstationMatch5.5.1
OR
vmwareworkstationMatch5.5.1_build_19175
OR
vmwareworkstationMatch5.5.3_build_34685
OR
vmwareworkstationMatch5.5.3_build_42958
OR
vmwareworkstationMatch5.5.4
OR
vmwareworkstationMatch5.5.4_build_44386
OR
vmwareworkstationMatch6.0

References

Related

gentoo 2
nvd 1
ubuntucve 1
openvas 17
nessus 11
cvelist 1
prion 1
ubuntu 1
seebug 1
securityvulns 2
vmware 1
gentoo
gentoo
ISC DHCP: Denial of service
2008-08-06 00:00:00
VMware Workstation and Player: Multiple vulnerabilities
2007-11-18 00:00:00
nvd
nvd
CVE-2007-0062
2007-09-21 19:17:00
ubuntucve
ubuntucve
CVE-2007-0062
2007-09-21 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200808-05 (dhcp)
2008-09-24 00:00:00
SLES10: Security update for DHCP
2009-10-13 00:00:00
SLES9: Security update for DHCP
2009-10-10 00:00:00
nessus
nessus
openSUSE 10 Security Update : dhcp (dhcp-5958)
2009-02-19 00:00:00
SuSE9 Security Update : DHCP (YOU Patch Number 12347)
2009-09-24 00:00:00
Mandriva Linux Security Advisory : dhcp (MDVSA-2009:153)
2009-07-20 00:00:00
cvelist
cvelist
CVE-2007-0062
2007-09-21 18:00:00
prion
prion
Integer overflow
2007-09-21 19:17:00
ubuntu
ubuntu
VMWare vulnerabilities
2007-11-15 00:00:00
seebug
seebug
VMware Workstation 6.0多个安全漏洞
2007-09-20 00:00:00
securityvulns
securityvulns
VMWare software multiple security vulnerabilities
2007-09-21 00:00:00
VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player
2007-09-21 00:00:00
vmware
vmware
Updated versions of all supported hosted products and all ESX 2x products and patches for ESX 30x address critical security updates. Service Console security updates for samba, bind, krb5, vixie-cron, shadow-utils, openldap, pam, gcc, and gdb packages.
2007-09-18 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.311 Low

EPSS

Percentile

97.0%

JSON
Related for CVE-2007-0062
gentoo2nvd1ubuntucve1openvas17nessus11cvelist1prion1ubuntu1seebug1securityvulns2vmware1