PT-2005-5251 · Vmware · Vmware Esx Server

Publicado 2005-12-29 · Atualizado 2018-10-30 · CVE-2005-4583

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions VMware ESX Server versions 2.x up to 2.5.x

Description The issue allows for remote code execution in the Web browser, likely related to cross-site scripting (XSS), via unspecified attack vectors in the Management Interface.

Recommendations For versions 2.x up to 2.5.x, update to a version released after 24 December 2005 to resolve the issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2005-4583

Produtos afetados

Vmware Esx Server

Referências · 7

• 🔥 http://securitytracker.com/id?1015422 · Exploit
• http://secunia.com/advisories/18250 · Aviso do Fabricante
• http://vmware.com/support/kb/enduser/std_adp.php?p_faqid=2001 · Correção
• http://osvdb.org/22119 · Correção
• http://vupen.com/english/advisories/2005/3084 · Aviso do Fabricante
• http://securityfocus.com/bid/16086 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2005-4583 · Nota de Segurança