Published: 02/11/2009 Updated: 10/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 535

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Directory traversal vulnerability in VMware Server 1.x prior to 1.0.10 build 203137 and 2.x prior to 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote malicious users to read arbitrary files via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
vmware server 1.0.1
vmware server 1.0.1_build_29996
vmware server 1.0.7
vmware server 1.0.8
vmware server 1.0.2
vmware server 1.0.3
vmware server 1.0.9
vmware esxi 3.5
vmware server 1.0
vmware server 1.0.5
vmware server 1.0.6
vmware server 1.0.4
vmware server 1.0.4_build_56528
vmware esx 3.0.3
vmware esx 3.5
vmware server 2.0.1
vmware server 2.0.0

source: wwwsecurityfocuscom/bid/36842/info VMware products are prone to a directory-traversal vulnerability because they fail to sufficiently sanitize user-supplied input data Exploiting the issue may allow an attacker to obtain sensitive information from the host operating system that could aid in further attacks description = [[ Che ...

Checks for a path-traversal vulnerability in VMWare ESX, ESXi, and Server (CVE-2009-3733).

nmap --script http-vmware-path-vuln -p80,443,8222,8333 <host>

| http-vmware-path-vuln:
|   VMWare path traversal (CVE-2009-3733): VULNERABLE
|     /vmware/Windows 2003/Windows 2003.vmx
|     /vmware/Pentest/Pentest - Linux/Linux Pentest Bravo.vmx
|     /vmware/Pentest/Pentest - Windows/Windows 2003.vmx
|     /mnt/vmware/vmware/FreeBSD 7.2/FreeBSD 7.2.vmx
|     /mnt/vmware/vmware/FreeBSD 8.0/FreeBSD 8.0.vmx
|     /mnt/vmware/vmware/FreeBSD 8.0 64-bit/FreeBSD 8.0 64-bit.vmx
|_    /mnt/vmware/vmware/Slackware 13 32-bit/Slackware 13 32-bit.vmx

Checks for a path-traversal vulnerability in VMWare ESX, ESXi, and Server (CVE-2009-3733).

nmap --script http-vmware-path-vuln -p80,443,8222,8333 <host>

| http-vmware-path-vuln:
|   VMWare path traversal (CVE-2009-3733): VULNERABLE
|     /vmware/Windows 2003/Windows 2003.vmx
|     /vmware/Pentest/Pentest - Linux/Linux Pentest Bravo.vmx
|     /vmware/Pentest/Pentest - Windows/Windows 2003.vmx
|     /mnt/vmware/vmware/FreeBSD 7.2/FreeBSD 7.2.vmx
|     /mnt/vmware/vmware/FreeBSD 8.0/FreeBSD 8.0.vmx
|     /mnt/vmware/vmware/FreeBSD 8.0 64-bit/FreeBSD 8.0 64-bit.vmx
|_    /mnt/vmware/vmware/Slackware 13 32-bit/Slackware 13 32-bit.vmx

个人学习一些软件和语言所记录的笔记，同时供团队内人员学习和更新。

PhotoShop Ctrl + T: 变换图形; Ctrl + J: 复制选中区域; Ctrl + G: 将选中图层编组; Ctrl + I: 颜色反向; Ctrl + 通道层: 选中(黑白)通道对应的区域; Ctrl + Shift + I: 反选选区; 图层->添加矢量蒙版: 根据通道层扣除背景; Alt + 图层蒙版层: 进入蒙版; Ctrl + Alt + 2: 高光选区; PremierPro [时间轴] Shift + �

CWE-22 http://www.vupen.com/english/advisories/2009/3062 http://lists.vmware.com/pipermail/security-announce/2009/000069.html http://www.vmware.com/security/advisories/VMSA-2009-0015.html http://www.securityfocus.com/bid/36842 http://secunia.com/advisories/37186 http://securitytracker.com/id?1023088 http://securitytracker.com/id?1023089 http://security.gentoo.org/glsa/glsa-201209-25.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7822 http://www.securityfocus.com/archive/1/507523/100/0/threaded https://nvd.nist.gov https://github.com/B4m600/B4mNote https://www.exploit-db.com/exploits/33310/

CVE-2009-3733

Vulnerability Summary

Exploits

Nmap Scripts

Github Repositories

References

Vulmon Search

About

Products

Connect