7.6

CVE-2013-1659

VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 do not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption) by modifying the client-server data stream.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ vCenter Server Version 4.0
VMware ≫ vCenter Server Version 4.0 Update update_1
VMware ≫ vCenter Server Version 4.0 Update update_2
VMware ≫ vCenter Server Version 4.0 Update update_3
VMware ≫ vCenter Server Version 4.0 Update update_4
VMware ≫ vCenter Server Version 4.0 Update update_4a
VMware ≫ Vcenter Server Appliance Version 5.1.0a
VMware ≫ vCenter Server Version 5.0
VMware ≫ vCenter Server Version 5.0 Update update_1
VMware ≫ ESXi Version 3.5
VMware ≫ ESXi Version 3.5 Update 1
VMware ≫ ESXi Version 4.0
VMware ≫ ESXi Version 4.0 Update 1
VMware ≫ ESXi Version 4.0 Update 2
VMware ≫ ESXi Version 4.0 Update 3
VMware ≫ ESXi Version 4.0 Update 4
VMware ≫ ESXi Version 4.1
VMware ≫ ESXi Version 4.1 Update 1
VMware ≫ ESXi Version 4.1 Update 2
VMware ≫ ESXi Version 5.0
VMware ≫ ESXi Version 5.0 Update 1
VMware ≫ ESXi Version 5.0 Update 2
VMware ≫ ESXi Version 5.1
VMware ≫ ESXi Version 3.5
VMware ≫ ESXi Version 3.5 Update 1
VMware ≫ ESXi Version 4.0
VMware ≫ ESXi Version 4.0 Update 1
VMware ≫ ESXi Version 4.0 Update 2
VMware ≫ ESXi Version 4.0 Update 3
VMware ≫ ESXi Version 4.0 Update 4
VMware ≫ ESXi Version 4.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.82% 0.759
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.6 4.9 10
AV:N/AC:H/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.vmware.com/security/advisories/VMSA-2013-0003.html