PT-2009-5986 · Vmware+1 · Vmware Lab Manager+6

Published 2009-12-16 · Updated 2018-10-10 · CVE-2009-3731

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions VMware vCenter versions 4.0 through 4.0 before Update 1 Build 208156 VMware Server version 2.0.2 VMware ESX version 4.0 VMware Lab Manager versions 2.x VMware vCenter Lab Manager versions 3.x through 4.x before 4.0.1 VMware Stage Manager versions 1.x before 4.0.1 WebWorks Publisher versions 6.x through 8.x WebWorks Publisher version 2003 WebWorks ePublisher versions 9.0.x through 9.3, 2008.1 through 2008.4, and 2009.x before 2009.3

Description The issue allows remote attackers to inject arbitrary web script or HTML via several components, including "wwhelp entry.html", "wwhelp/wwhimpl/api.htm", "wwhelp/wwhimpl/common/html/frameset.htm", "wwhelp/wwhimpl/common/scripts/switch.js", and the window.opener component in "wwhelp/wwhimpl/common/html/bookmark.htm". This is related to unspecified parameters and messages used in topic links for the bookmarking functionality.

Recommendations For VMware vCenter versions 4.0 through 4.0 before Update 1 Build 208156, update to a version that includes Update 1 Build 208156 or later. For VMware Server version 2.0.2, consider disabling the vulnerable components until a patch is available. For VMware ESX version 4.0, restrict access to the vulnerable API endpoints until a fix is provided. For VMware Lab Manager versions 2.x, avoid using the parameter window.opener in the affected API endpoint until the issue is resolved. For VMware vCenter Lab Manager versions 3.x through 4.x before 4.0.1, update to version 4.0.1 or later. For VMware Stage Manager versions 1.x before 4.0.1, update to version 4.0.1 or later. For WebWorks Publisher versions 6.x through 8.x, WebWorks Publisher version 2003, and WebWorks ePublisher versions 9.0.x through 9.3, 2008.1 through 2008.4, and 2009.x before 2009.3, update to a version that includes the necessary security fixes.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2009-3731

Affected Products

Vmware Vcenter

Vmware Esxi

Vmware Lab Manager

Vmware Server

Vmware Stage Manager

Vmware Vcenter Lab Manager

Webworks Epublisher

References · 16

• http://webworks.com/Security/2009-0001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3731 · Security Note
• http://securityfocus.com/bid/37346 · Patch
• http://lists.vmware.com/pipermail/security-announce/2009/000073.html · Vendor Advisory
• http://secunia.com/advisories/38842 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5944 · Note
• http://secunia.com/advisories/38749 · Note
• http://securitytracker.com/id?1023683 · Note
• http://osvdb.org/62742 · Note
• http://osvdb.org/62739 · Note
• http://securityfocus.com/archive/1/509883/100/0/threaded · Note
• http://archives.neohapsis.com/archives/bugtraq/2009-12/0229.html · Note
• http://osvdb.org/62741 · Note
• http://osvdb.org/62738 · Note
• http://osvdb.org/62740 · Note