← voltar
CVE-2006-3589

CVE-2006-3589

EPSS 0.4%
vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://kb.vmware.com/kb/2467205http://secunia.com/advisories/21120http://secunia.com/advisories/23680http://securitytracker.com/id?1016536https://exchange.xforce.ibmcloud.com/vulnerabilities/27881http://www.osvdb.org/27418http://www.securityfocus.com/archive/1/440583/100/0/threadedhttp://www.securityfocus.com/archive/1/441082/100/0/threadedhttp://www.securityfocus.com/archive/1/456546/100/200/threadedhttp://www.securityfocus.com/bid/19060http://www.securityfocus.com/bid/19062http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html