CVE-2013-1661
published 2013-09-04CVE-2013-1661: VMware ESXi 4.0 through 5.1, and ESX 4.0 and 4.1, does not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to…
PriorityP414medium4.3CVSS 2.0
AVNACMAuNCNINAP
EPSS
1.10%
62.1th percentile
VMware ESXi 4.0 through 5.1, and ESX 4.0 and 4.1, does not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to cause a denial of service (unhandled exception and application crash) by modifying the client-server data stream.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | esx | — | — |
| vmware | esx | — | — |
| vmware | esxi | — | — |
| vmware | esxi | — | — |
| vmware | esxi | — | — |
| vmware | esxi | — | — |
| vmware | esxi | — | — |
| vmware | vcenter_server | — | — |
| vmware | vmware_esxi | — | — |
| vmware | vmware_workstation | — | — |
| vmware | vsphere | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VMware
VMware ESXi and ESX address an NFC Protocol Unhandled Exception
vendor_vmware·2013-08-29·CVSS 4.3
CVE-2013-1661 [MEDIUM] VMware ESXi and ESX address an NFC Protocol Unhandled Exception
VMSA-2013-0011: VMware ESXi and ESX address an NFC Protocol Unhandled Exception
a. VMware ESXi and ESX NFC Protocol Unhandled Exception VMware ESXi and ESX contain a vulnerability in the handling of the Network File Copy (NFC) protocol. To exploit this vulnerability, an attacker must intercept and modify the NFC traffic between ESXi/ESX and the client. Exploitation of the issue may lead to a Denial of Service. To reduce the likelihood of exploitation, vSphere components should be deployed on an isolated management network VMware would like to thank Alex Chapman of Context Information Security for reporting this issue to us. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2013-1661 to this issue. Column 4 of the following table lists the action re
VMware
VMware Workstation host privilege escalation vulnerability
vendor_vmware·2013-08-22·CVSS 4.3
CVE-2013-1661 [MEDIUM] VMware Workstation host privilege escalation vulnerability
VMSA-2013-0010: VMware Workstation host privilege escalation vulnerability
a. VMware mount privilege escalation VMware Workstation and Player contain a vulnerability in the handling of the vmware-mount command. A local malicious user may exploit this vulnerability to escalate their privileges to root on the host OS. The issue is present when Workstation or Player are installed on a Debian-based version of Linux. The vulnerability does not allow for privilege escalation from the Guest Operating System to the host or vice-versa. This means that host memory can not be manipulated from the Guest Operating System.
CVEs: CVE-2013-1661, CVE-2013-1662
Affected products: ESXi, VMware Workstation
GHSA
GHSA-x84p-w2wx-9hf2: VMware ESXi 4
ghsa_unreviewed·2022-05-17
CVE-2013-1661 [MEDIUM] CWE-20 GHSA-x84p-w2wx-9hf2: VMware ESXi 4
VMware ESXi 4.0 through 5.1, and ESX 4.0 and 4.1, does not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to cause a denial of service (unhandled exception and application crash) by modifying the client-server data stream.
No detection rules found.
No public exploits indexed.
2013-09-04
Published