CVE-2010-4573 The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly configure the SFCB authentication mode, which allows remote attackers to obtain access via an arbitrary....
HighCVSS 9.3
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly configure the SFCB authentication mode, which allows remote attackers to obtain access via an arbitrary username and password.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware esxi | = 4.1 | No fix listed |
References
- kb.vmware.com
- [security-announce] 20101221 VMSA-2010-0020 VMware ESXi 4.1 Update Installer SFCB Authentication Flaw mailing-list
- 42591 third-party-advisory vendor-advisory
- 1024917 vdb-entry
- 20101221 VMSA-2010-0020 VMware ESXi 4.1 Update Installer SFCB Authentication Flaw mailing-list
- 45543 vdb-entry
- www.vmware.com vendor-advisory
- ADV-2010-3303 vdb-entry vendor-advisory