CVE-2012-2448 VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) via NFS traffic.
HighCVSS 7.5
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) via NFS traffic.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware esxi | = 3.5 | No fix listed |
| VMware esxi | = 3.5-1 | No fix listed |
| VMware esxi | = 4.0 | No fix listed |
| VMware esxi | = 4.0-1 | No fix listed |
| VMware esxi | = 4.0-2 | No fix listed |
| VMware esxi | = 4.0-3 | No fix listed |
| VMware esxi | = 4.0-4 | No fix listed |
| VMware esxi | = 4.1 | No fix listed |
| VMware esxi | = 4.1-1 | No fix listed |
| VMware esxi | = 4.1-2 | No fix listed |
| VMware esxi | = 5.0 | No fix listed |
| VMware ESX | = 3.5 | No fix listed |
| VMware ESX | = 3.5-update1 | No fix listed |
| VMware ESX | = 3.5-update2 | No fix listed |
| VMware ESX | = 3.5-update3 | No fix listed |
| VMware ESX | = 4.0 | No fix listed |
| VMware ESX | = 4.1 | No fix listed |
References
- 81693 vdb-entry
- 53371 vdb-entry
- 1027018 vdb-entry
- www.vmware.com vendor-advisory
- vmware-nfs-code-execution(75375) vdb-entry