PT-2005-4381 · Vmware · Vmware Esx Server

Publicado 2005-12-31 · Atualizado 2018-10-30 · CVE-2005-3618

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware ESX Server versions 2.0.x through 2.0.1 VMware ESX Server versions 2.1.x through 2.1.2 VMware ESX Server versions 2.x through 2.5.2

Description A cross-site request forgery (CSRF) issue exists in the management interface, allowing remote attackers to perform unauthorized actions as the administrator via URLs. This can be demonstrated using the setUsr operation to change a password.

Recommendations For versions 2.0.x through 2.0.1, update to version 2.0.2 patch 1. For versions 2.1.x through 2.1.2, update to version 2.1.3 patch 1. For versions 2.x through 2.5.2, update to version 2.5.3 patch 2.

Correção

Identificadores relacionados

CVE-2005-3618

Produtos afetados

Vmware Esx Server

Referências · 8

• http://securityfocus.com/archive/1/441825/100/100/threaded · Nota
• http://securityfocus.com/archive/1/441726/100/100/threaded · Nota
• http://kb.vmware.com/kb/2118366 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-3618 · Nota de Segurança
• http://vupen.com/english/advisories/2006/3075 · Nota
• http://securitytracker.com/id?1016612 · Nota
• http://secunia.com/advisories/21230 · Nota
• http://corsaire.com/advisories/c051114-001.txt · Nota