PT-2005-5436 · Vmware · Vmware Esx Server

Publicado 2005-12-31 · Atualizado 2018-10-30 · CVE-2005-4773

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions VMware ESX Server versions 2.0.x through 2.5.x VMware ESX Server version 2.x VMware ESX Server version 2.1.x

Description The issue allows local users to cause a denial of service, resulting in a shutdown, by executing specific scripts at the service console. The scripts involved are halt, poweroff, and reboot.

Recommendations For VMware ESX Server versions 2.0.x through 2.5.x, consider restricting access to the halt, poweroff, and reboot scripts to prevent unauthorized execution. For VMware ESX Server version 2.x, restrict access to the service console to minimize the risk of exploitation. For VMware ESX Server version 2.1.x, limit the execution of the halt, poweroff, and reboot scripts to authorized personnel only.

Correção

Identificadores relacionados

CVE-2005-4773

Produtos afetados

Vmware Esx Server

Referências · 3

• http://vmware.com/support/kb/enduser/std_adp.php?p_sid=dsxk%2ABWh&p_lva=&p_faqid=1817 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4773 · Nota de Segurança
• http://osvdb.org/21584 · Correção