CVE-2007-0062 - 漏洞详情

CVE-2007-0062 (CNNVD-200709-314)

CRITICAL

中文标题:

VMware Workstation DHCP服务器拒绝服务攻击漏洞

英文标题:

Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in ...

CVSS分数: 10.0

发布时间: 2007-09-21 18:00:00

漏洞类型: 数字错误

状态: PUBLISHED

数据质量分数: 0.30

数据版本: v3

漏洞描述

中文描述:

VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMWare中的DHCP服务器存在拒绝服务器攻击漏洞，远程攻击者可以通过DHCP最大请求包导致服务器守护进程崩溃或者使栈缓冲溢出，导致主机系统中的进程失去响应异常退出，从而使主机系统不可用或者可以执行任意代码。

英文描述:

Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528; allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a malformed DHCP packet with a large dhcp-max-message-size that triggers a stack-based buffer overflow, related to servers configured to send many DHCP options to clients.

CWE类型:

CWE-189 CWE-119

受影响产品

厂商	产品	版本	版本范围	平台	CPE
vmware	ace	1.0.3	-	-	`cpe:2.3:a:vmware:ace:1.0.3:::::::*`
vmware	ace	2.0	-	-	`cpe:2.3:a:vmware:ace:2.0:::::::*`
vmware	player	1.0.4	-	-	`cpe:2.3:a:vmware:player:1.0.4:::::::*`
vmware	player	2.0	-	-	`cpe:2.3:a:vmware:player:2.0:::::::*`
vmware	server	1.0.3	-	-	`cpe:2.3:a:vmware:server:1.0.3:::::::*`
vmware	vmware_workstation	6.0.1	-	-	`cpe:2.3:a:vmware:vmware_workstation:6.0.1:::::::*`
vmware	workstation	3.4	-	-	`cpe:2.3:a:vmware:workstation:3.4:::::::*`
vmware	workstation	4.0	-	-	`cpe:2.3:a:vmware:workstation:4.0:::::::*`
vmware	workstation	4.0.1	-	-	`cpe:2.3:a:vmware:workstation:4.0.1:::::::*`
vmware	workstation	4.0.2	-	-	`cpe:2.3:a:vmware:workstation:4.0.2:::::::*`
vmware	workstation	4.5.2	-	-	`cpe:2.3:a:vmware:workstation:4.5.2:::::::*`
vmware	workstation	5.5.0_build_13124	-	-	`cpe:2.3:a:vmware:workstation:5.5.0_build_13124:::::::*`
vmware	workstation	5.5.1	-	-	`cpe:2.3:a:vmware:workstation:5.5.1:::::::*`
vmware	workstation	5.5.1_build_19175	-	-	`cpe:2.3:a:vmware:workstation:5.5.1_build_19175:::::::*`
vmware	workstation	5.5.3_build_34685	-	-	`cpe:2.3:a:vmware:workstation:5.5.3_build_34685:::::::*`
vmware	workstation	5.5.3_build_42958	-	-	`cpe:2.3:a:vmware:workstation:5.5.3_build_42958:::::::*`
vmware	workstation	5.5.4	-	-	`cpe:2.3:a:vmware:workstation:5.5.4:::::::*`
vmware	workstation	5.5.4_build_44386	-	-	`cpe:2.3:a:vmware:workstation:5.5.4_build_44386:::::::*`
vmware	workstation	6.0	-	-	`cpe:2.3:a:vmware:workstation:6.0:::::::*`

解决方案

中文解决方案:

（暂无数据）

英文解决方案:

（暂无数据）

临时解决方案:

（暂无数据）

参考链接

20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player mailing-list
cve.org

访问

25729 vdb-entry
cve.org

访问

GLSA-200711-23 vendor-advisory
cve.org

访问

20090312 rPSA-2009-0041-1 dhclient dhcp libdhcp4client mailing-list
cve.org

访问

USN-543-1 vendor-advisory
cve.org

访问

1018717 vdb-entry
cve.org

访问

ADV-2007-3229 vdb-entry
cve.org

访问

27694 third-party-advisory
cve.org

访问

31396 third-party-advisory
cve.org

访问

20070919 VMWare DHCP Server Remote Code Execution Vulnerabilities third-party-advisory
cve.org

访问