| Check Point Reference: |
CPAI-2007-118 |
| Date Published: |
1 Oct 2007 |
| Severity: |
High
|
| Last Updated: |
Monday 01 January, 2007 |
| Source: |
Secunia Advisory: SA26890 |
| Industry Reference: | CVE-2007-0063 |
| Protection Provided by: |
|
| Who is Vulnerable? | EMC VMware ACE 1 prior to 1.0.4
EMC VMware ACE 2 prior to 2.0.1
EMC VMware Player 1 prior to 1.0.5
EMC VMware Player 2 prior to 2.0.1
EMC VMware Server 1 Prior to 1.0.4
EMC VMware Worstation 6 prior to 6.0.1
EMC VMware Worstation 5 prior to 5.5.5 |
| Vulnerability Description |
An integer underflow vulnerability has been reported in the VMware DHCP service. VMware Workstation is a virtualization technology that allows running multiple instances of virtual computers simultaneously with the hosting operating system. The Dynamic Host Configuration Protocol (DHCP) provides central management of IP addresses and other details related to the IP configuration used on the network. A remote user can exploit this vulnerability by sending a specially crafted DHCP request to the vulnerable DHCP server. This may result in remote code execution on the affected system. |
| Update/Patch Avaliable | Upgrade your product to the latest versions or apply patches:
VMware |
| Vulnerability Details | The vulnerability is due to a boundary error in the VMware DHCP service that fails to properly handle malformed DHCP requests. To trigger this issue, an attacker may create a malicious DHCP request and send it to a vulnerable server. Successful exploitation may allow execution of arbitrary code. |
Feedback