Skip to content
Fencer Vulns
medium 5.0

CVE-2009-3707 json

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 22760…

published 2009-10-16 17 y ago modified 2026-06-16 4 mo ago also EUVD-2009-3680

cvss
5.0
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
11.1%
EPSS 11.1% chance of exploitation in 30 days, percentile 95%
public exploits
1
Exploit-DB

Summary

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware ACE 2.6 before 2.6.1 build 227600 and 2.5.x before 2.5.4 build 246459, and VMware Server 2.x allows remote attackers to cause a denial of service (process crash) via a \x25\xFF sequence in the USER and PASS commands, related to a "format string DoS" issue. NOTE: some of these details are obtained from third party information.

Timeline

  1. First public exploit (EDB-33271)
  2. Published

Exploit prediction

11.11% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-33271 VMware Player / VMware Workstation 6.5.3 - 'VMware-authd' Remote Denial of Service dos, 2009-10-07
  • shinnai.net http://www.shinnai.net/xplits/TXT_JtYUv6C6j5b6Bw6iIkF4.html referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P

Classification

Weakness
  • CWE-134 Use of Externally-Controlled Format String
Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.