PT-2009-5987 · Vmware · Vmware Esxi+1

Published 2009-11-02 · Updated 2024-05-17 · CVE-2009-3733

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions VMware Server versions 1.x through 1.0.9 and 2.x through 2.0.1 VMware ESXi version 3.5 VMware ESX versions 3.0.3 and 3.5

Description A directory traversal issue allows remote attackers to read arbitrary files via unspecified vectors.

Recommendations For VMware Server versions 1.x through 1.0.9, update to version 1.0.10 build 203137 or later. For VMware Server versions 2.x through 2.0.1, update to version 2.0.2 build 203138 or later. For VMware ESXi version 3.5 and VMware ESX versions 3.0.3 and 3.5, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2009-3733

Affected Products

Vmware Esxi

Vmware Server

References · 15

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/vmware/vmware_server_dir_trav.rb · Exploit
• 🔥 https://exploit-db.com/exploits/33310 · Exploit
• http://vmware.com/security/advisories/VMSA-2009-0015.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3733 · Security Note
• http://lists.vmware.com/pipermail/security-announce/2009/000069.html · Vendor Advisory
• http://vupen.com/english/advisories/2009/3062 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201209-25.xml · Vendor Advisory
• http://securitytracker.com/id?1023089 · Note
• http://securityfocus.com/archive/1/507523/100/0/threaded · Note
• http://secunia.com/advisories/37186 · Note
• http://securitytracker.com/id?1023088 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3733 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7822 · Note
• http://securityfocus.com/bid/36842 · Note
• https://t.me/cvenotify/80290 · Telegram Post