CVE-2008-3697: VMware Server

Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days.

An unspecified ISAPI extension in VMware Server before 1.0.7 build 108231 allows remote attackers to cause a denial of service (IIS crash) via a malformed request.

Affected products

• VMware Server: version 1.0.1_build_29996 only; version 1.0.3 only; version 1.0.4_build_56528 only
• VMware VMware Server: up to and including 1.0.6; version 1.0 only; version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.4 only; …

Published 2008-09-03. Last modified 2026-06-16.