PT-2005-5436 · Vmware · Vmware Esx Server

Published 2005-12-31 · Updated 2018-10-30 · CVE-2005-4773

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions VMware ESX Server versions 2.0.x through 2.5.x VMware ESX Server version 2.x VMware ESX Server version 2.1.x

Description The issue allows local users to cause a denial of service, resulting in a shutdown, by executing specific scripts at the service console. The scripts involved are halt, poweroff, and reboot.

Recommendations For VMware ESX Server versions 2.0.x through 2.5.x, consider restricting access to the halt, poweroff, and reboot scripts to prevent unauthorized execution. For VMware ESX Server version 2.x, restrict access to the service console to minimize the risk of exploitation. For VMware ESX Server version 2.1.x, limit the execution of the halt, poweroff, and reboot scripts to authorized personnel only.

Fix

Related Identifiers

CVE-2005-4773

Affected Products

Vmware Esx Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-4773 · Security Note
• http://osvdb.org/21584 · Patch
• http://vmware.com/support/kb/enduser/std_adp.php?p_sid=dsxk%2ABWh&p_lva=&p_faqid=1817 · Note