PT-2003-2236 · Vmware · Vmware Esx Server

Published 2003-12-31 · Updated 2018-10-30 · CVE-2003-1291

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware ESX Server version 1.5.2 before Patch 4

Description The issue allows local users to execute arbitrary programs as root via certain modified VMware ESX Server environment variables.

Recommendations For VMware ESX Server version 1.5.2, apply Patch 4 to resolve the issue.

Fix

Related Identifiers

CVE-2003-1291

Affected Products

Vmware Esx Server

References · 4

• http://vmware.com/download/esx/esx152-patch4.html · Patch
• http://osvdb.org/21585 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2003-1291 · Security Note
• http://vmware.com/support/kb/enduser/std_adp.php?p_sid=dsxk%2ABWh&p_lva=&p_faqid=1108 · Note