Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3…

Exploit prediction (EPSS)

83.38% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.

Exploits and detections

• Metasploit auxiliary/scanner/vmware/vmware_server_dir_trav VMware Server Directory Traversal Vulnerability · metasploit auxiliary, normal rank
• EDB-33310 VMware Server 2.0.1 / ESXi Server 3.5 - Directory Traversal · remote · 2009-10-27

CVSS scores

Classification

Weakness

• CWE-22 Improper Limitation of a Pathname to a Restricted Directory

Technology feeds

VMware (RSS, critical only)

References

• security.gentoo.org /glsa/glsa-201209-25.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
• oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7822 · vdb-entry, signature, x_refsource_OVAL, x_transferred
• vupen.com /english/advisories/2009/3062 · vdb-entry, x_refsource_VUPEN, x_transferred
• securitytracker.com /id?1023089 · vdb-entry, x_refsource_SECTRACK, x_transferred
• lists.vmware.com /pipermail/security-announce/2009/000069.html · mailing-list, x_refsource_MLIST, x_transferred
• securityfocus.com /bid/36842 · vdb-entry, x_refsource_BID, x_transferred
• secunia.com /advisories/37186 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• securityfocus.com /archive/1/507523/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
• securitytracker.com /id?1023088 · vdb-entry, x_refsource_SECTRACK, x_transferred
• vmware.com /security/advisories/VMSA-2009-0015.html · x_refsource_CONFIRM, x_transferred

Sources

• CVE List: CVE-2009-3733
• NVD: CVE-2009-3733

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.