PT-2010-5540 · Vmware · Vmware Esxi

Publicado 2010-12-22 · Atualizado 2018-10-10 · CVE-2010-4573

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware ESXi version 4.1

Description The issue concerns the Update Installer in VMware ESXi, which fails to properly configure the SFCB authentication mode when a modified sfcb.cfg is present. This allows remote attackers to gain access using any username and password.

Recommendations For VMware ESXi version 4.1, ensure proper configuration of the SFCB authentication mode to prevent unauthorized access. As a temporary workaround, consider restricting access to the SFCB service until a proper configuration can be applied.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2010-4573

Produtos afetados

Vmware Esxi

Referências · 10

• http://securityfocus.com/archive/1/515420/100/0/threaded · Nota
• http://kb.vmware.com/kb/1031761 · Nota
• http://securityfocus.com/bid/45543 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4573 · Nota
• http://lists.vmware.com/pipermail/security-announce/2010/000114.html · Nota
• http://secunia.com/advisories/42591 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-4573 · Nota de Segurança
• http://vupen.com/english/advisories/2010/3303 · Aviso do Fabricante
• http://securitytracker.com/id?1024917 · Nota
• http://vmware.com/security/advisories/VMSA-2010-0020.html · Aviso do Fabricante