Detections
Analytics
VMware Host Agent Directory Traversal (VMSA-2009-0015)
medium Nessus Plugin ID 44646
Language:
Synopsis
A web application on the remote host has a directory traversal vulnerability.Description
The version of VMware Host Agent (hostd) running on the remote host has a directory traversal vulnerability. The affected service runs as root. VMware ESX, VMware ESXi, and VMware Server on Linux are affected.A remote attacker could exploit this to read arbitrary files, including guest VMs, from the system.
Solution
Apply the relevant upgrade referenced in the VMware advisory.See Also
http://www.nessus.org/u?c2787f95
http://fyrmassociates.com/tools/gueststealer-v1.pl
https://seclists.org/bugtraq/2009/Oct/274
https://www.vmware.com/security/advisories/VMSA-2009-0015.html
Plugin Details
Severity: Medium
ID: 44646
File Name: vmware_dir_traversal_vmsa_2009_0015.nasl
Version: 1.20
Type: remote
Family: CGI abuses
Published: 2/17/2010
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.2
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 4.1
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
Vulnerability Information
CPE: cpe:/a:a:vmware:esx, cpe:/a:a:vmware:esxi, cpe:/a:a:vmware:server
Required KB Items: www/vmware_hostd
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Exploited by Nessus: true
Patch Publication Date: 10/27/2009
Vulnerability Publication Date: 10/27/2009
Exploitable With
CANVAS (D2ExploitPack)
Elliot (Vmware Server File Disclosure)
Reference Information
CVE: CVE-2009-3733
BID: 36842