PT-2005-5251 · Vmware · Vmware Esx Server

Published 2005-12-29 · Updated 2018-10-30 · CVE-2005-4583

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions VMware ESX Server versions 2.x up to 2.5.x

Description The issue allows for remote code execution in the Web browser, likely related to cross-site scripting (XSS), via unspecified attack vectors in the Management Interface.

Recommendations For versions 2.x up to 2.5.x, update to a version released after 24 December 2005 to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2005-4583

Affected Products

Vmware Esx Server

References · 7

• 🔥 http://securitytracker.com/id?1015422 · Exploit
• http://secunia.com/advisories/18250 · Vendor Advisory
• http://vmware.com/support/kb/enduser/std_adp.php?p_faqid=2001 · Patch
• http://osvdb.org/22119 · Patch
• http://vupen.com/english/advisories/2005/3084 · Vendor Advisory
• http://securityfocus.com/bid/16086 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-4583 · Security Note