CVE-2008-4281 Directory traversal vulnerability in VMWare ESXi 3.5 before ESXe350-200810401-O-UG and ESX 3.5 before ESX350-200810201-UG allows administrators with the Datastore.FileManagement privilege to gain priv...
HighCVSS 9.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in VMWare ESXi 3.5 before ESXe350-200810401-O-UG and ESX 3.5 before ESX350-200810201-UG allows administrators with the Datastore.FileManagement privilege to gain privileges via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware ESX | <= 3.5 | No fix listed |
| VMware esxi | <= 3.5 | No fix listed |
References
- [Security-announce] 20081106 VMSA-2008-0018 VMware Hosted products and patches for ESX and ESXi resolve two security issues mailing-list patch
- 32624 third-party-advisory vendor-advisory
- 20081107 VMSA-2008-0018 VMware Hosted products and patches for ESX and ESXi resolve two security issues mailing-list
- 32172 vdb-entry
- 1021155 vdb-entry
- www.vmware.com
- ADV-2008-3052 vdb-entry
- vmware-virtualcenter-directory-traversal(46418) vdb-entry
- oval:org.mitre.oval:def:6425 signature vdb-entry