CVE-2009-3733 Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to r...
MediumCVSS 5.0
EPSS 83.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware ESX | = 3.0.3 | No fix listed |
| VMware ESX | = 3.5 | No fix listed |
| VMware esxi | = 3.5 | No fix listed |
| VMware server | = 1.0 | No fix listed |
| VMware server | = 1.0.1 | No fix listed |
| VMware server | = 1.0.1_build_29996 | No fix listed |
| VMware server | = 1.0.2 | No fix listed |
| VMware server | = 1.0.3 | No fix listed |
| VMware server | = 1.0.4 | No fix listed |
| VMware server | = 1.0.4_build_56528 | No fix listed |
| VMware server | = 1.0.5 | No fix listed |
| VMware server | = 1.0.6 | No fix listed |
| VMware server | = 1.0.7 | No fix listed |
| VMware server | = 1.0.8 | No fix listed |
| VMware server | = 1.0.9 | No fix listed |
| VMware server | = 2.0.0 | No fix listed |
| VMware server | = 2.0.1 | No fix listed |
References
- [security-announce] 20091027 VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues mailing-list patch vendor-advisory
- 37186 broken-link third-party-advisory
- GLSA-201209-25 third-party-advisory vendor-advisory
- 1023088 third-party-advisory vdb-entry
- 1023089 third-party-advisory vdb-entry
- 20091027 VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues mailing-list third-party-advisory vdb-entry
- 36842 third-party-advisory vdb-entry
- www.vmware.com patch vendor-advisory
- ADV-2009-3062 patch vdb-entry vendor-advisory
- oval:org.mitre.oval:def:7822 signature third-party-advisory vdb-entry