PT-2007-6129 · Vmware · Vmware Server

Publicado 2007-09-21 · Atualizado 2008-09-05 · CVE-2007-5024

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions VMware Server versions prior to 1.0.4 Build 56528

Description The issue allows local users to obtain sensitive information by reading log files that contain passwords written in cleartext. This is a result of the software writing passwords to unspecified log files.

Recommendations For versions prior to 1.0.4 Build 56528, update to version 1.0.4 Build 56528 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2007-5024

Produtos afetados

Vmware Server

Referências · 2

• http://vmware.com/support/server/doc/releasenotes_server.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-5024 · Nota de Segurança