CVE-2006-3589 — Vmware ESX vulnerability

3 documents3 sources
Severity
3.6LOWNVD
EPSS
0.1%
top 79.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Vmware ESXVmware InfrastructureVmware Server+1 more
Timeline
PublishedJul 21
Latest updateMay 1

Description

vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key.

CVSS vector

AV:L/AC:L/C:P/I:P/A:NExploitability: 3.9 | Impact: 4.9

Affected Packages4 packages

▶NVDvmware/server1.0.1_build_29996
▶NVDvmware/esx7 versions+6

🔴Vulnerability Details

2
GHSA
GHSA-h2qv-j7rw-m85p: vmware-config↗2022-05-01
▶
CVEList
CVE-2006-3589: vmware-config↗2006-07-19
▶
CVE-2006-3589 — Vmware ESX vulnerability | cvebase