PT-2011-2339 · Vmware · Vmware Vcenter+1

Published 2011-05-09 · Updated 2011-05-27 · CVE-2011-0426

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions VMware vCenter versions 4.0 through 4.0 Update 2 VMware vCenter version 4.1 VMware VirtualCenter versions 2.5 through 2.5 Update 5

Description A directory traversal issue allows remote attackers to read arbitrary files via unspecified vectors.

Recommendations For VMware vCenter versions 4.0 through 4.0 Update 2, update to version 4.0 Update 3. For VMware vCenter version 4.1, update to version 4.1 Update 1. For VMware VirtualCenter versions 2.5 through 2.5 Update 5, update to version 2.5 Update 6a.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2011-0426

Affected Products

Vmware Vcenter

Vmware Virtualcenter

References · 5

• http://vmware.com/security/advisories/VMSA-2011-0008.html · Vendor Advisory
• http://lists.vmware.com/pipermail/security-announce/2011/000137.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0426 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0426 · Note
• http://securitytracker.com/id?1025502 · Note