CVE-2008-2097: VMware Esx

High severity, CVSS 9.0. EPSS: 3.9% chance of exploitation in the next 30 days.

Buffer overflow in the openwsman management service in VMware ESXi 3.5 and ESX 3.5 allows remote authenticated users to gain privileges via an "invalid Content-Length."

Affected products

• VMware Esx: version 3.5 only
• VMware ESXi: version 3.5 only

Published 2008-06-05. Last modified 2026-06-16.