PT-2007-6629 · Vmware · Vmware Server

Published 2007-10-21 · Updated 2009-10-14 · CVE-2007-5619

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware Server versions prior to 1.0.4

Description The issue allows user passwords to be recorded in cleartext in server logs, which might enable local users to gain privileges.

Recommendations For versions prior to 1.0.4, update to version 1.0.4 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-5619

Affected Products

Vmware Server

References · 2

• http://vmware.com/support/server/doc/releasenotes_server.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-5619 · Security Note