PT-2009-3171 · Vmware · Vmware Virtualcenter+1

Craig Marshall · Publicado 2009-04-06 · Atualizado 2017-09-29 · CVE-2009-0518

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions VMware VirtualCenter versions prior to 2.5 Update 4 VMware ESXi versions prior to 3.5 Update 4 VMware ESX versions prior to 3.5 Update 4

Description The issue allows local users to potentially obtain the VirtualCenter Server password, as it is retained in process memory.

Recommendations For VMware VirtualCenter versions prior to 2.5 Update 4, update to version 2.5 Update 4 or later. For VMware ESXi versions prior to 3.5 Update 4, update to version 3.5 Update 4 or later. For VMware ESX versions prior to 3.5 Update 4, update to version 3.5 Update 4 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2009-0518

Produtos afetados

Vmware Esxi

Vmware Virtualcenter

Referências · 9

• http://securityfocus.com/bid/34373 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0518 · Nota
• http://vupen.com/english/advisories/2009/0944 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0518 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6376 · Nota
• http://secunia.com/advisories/34585 · Nota
• http://seclists.org/fulldisclosure/2009/Apr/0036.html · Nota
• http://lists.vmware.com/pipermail/security-announce/2009/000054.html · Aviso do Fabricante
• http://vmware.com/security/advisories/VMSA-2009-0005.html · Nota