CVE-2009-3733

EUVD-2009-3705
Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
Affected Products (NVD)
VendorProductVersion
vmwareesx
3.0.3
vmwareesx
3.5
vmwareesxi
3.5
vmwareserver
1.0
vmwareserver
1.0.1
vmwareserver
1.0.1_build_29996:_build_29996
vmwareserver
1.0.2
vmwareserver
1.0.3
vmwareserver
1.0.4
vmwareserver
1.0.4_build_56528:_build_56528
vmwareserver
1.0.5
vmwareserver
1.0.6
vmwareserver
1.0.7
vmwareserver
1.0.8
vmwareserver
1.0.9
vmwareserver
2.0.0
vmwareserver
2.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://lists.vmware.com/pipermail/security-announce/2009/000069.html
http://secunia.com/advisories/37186
http://security.gentoo.org/glsa/glsa-201209-25.xml
http://securitytracker.com/id?1023088
http://securitytracker.com/id?1023089
http://www.securityfocus.com/archive/1/507523/100/0/threaded
http://www.securityfocus.com/bid/36842
http://www.vmware.com/security/advisories/VMSA-2009-0015.html
http://www.vupen.com/english/advisories/2009/3062
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7822
http://lists.vmware.com/pipermail/security-announce/2009/000069.html
http://secunia.com/advisories/37186
http://security.gentoo.org/glsa/glsa-201209-25.xml
http://securitytracker.com/id?1023088
http://securitytracker.com/id?1023089
http://www.securityfocus.com/archive/1/507523/100/0/threaded
http://www.securityfocus.com/bid/36842
http://www.vmware.com/security/advisories/VMSA-2009-0015.html
http://www.vupen.com/english/advisories/2009/3062
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7822