PT-2012-4051 · Vmware · Vmware Esxi

Publicado 2012-05-04 · Atualizado 2017-12-14 · CVE-2012-2448

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions VMware ESXi versions 3.5 through 5.0 VMware ESX versions 3.5 through 4.1

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, specifically a memory overwrite, via NFS traffic.

Recommendations For VMware ESXi versions 3.5 through 5.0, update to a version that is not affected by this issue. For VMware ESX versions 3.5 through 4.1, update to a version that is not affected by this issue.

Correção

DoS

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-2448

Produtos afetados

Vmware Esxi

Referências · 7

• http://securitytracker.com/id?1027018 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-2448 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2448 · Nota
• http://osvdb.org/81693 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75375 · Nota
• http://vmware.com/security/advisories/VMSA-2012-0009.html · Aviso do Fabricante
• http://securityfocus.com/bid/53371 · Nota