CVE-2008-2097

CVE-2008-2097 describes a critical buffer overflow vulnerability in the openwsman management service of VMware ESXi 3.5 and ESX 3.5. This flaw allows remote authenticated users to achieve privilege escalation by submitting a crafted request with an "invalid Content-Length." With a CVSS score of 9.0, this vulnerability presents a high risk, enabling complete compromise of confidentiality, integrity, and availability (C:C/I:C/A:C) with low attack complexity. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been identified, the high FAUCET Risk Score of 77/100 indicates its potential severity.