Oval Definition:oval:org.mitre.oval:def:20707
Revision Date:2014-01-20Version:4
Title:VMware vCenter Server, ESXi and ESX address an NFC Protocol memory corruption and third party library security issues.
Description:VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 do not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption) by modifying the client-server data stream.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2013-1659
Platform(s):VMWare ESX Server 3.5
VMWare ESX Server 4.0
VMWare ESX Server 4.1
Product(s):
Definition Synopsis
  • Patch ESX410-201301401-SG is not installed
  • VMware ESX Server 4.1 is installed
  • AND Patch ESX410-201301401-SG is not installed
  • OR Patch ESX400-201302401-SG is not installed
  • VMware ESX Server 4.0 is installed
  • AND Patch ESX400-201302401-SG is not installed
  • OR Patch ESX350-201302401-SG is not installed
  • VMware ESX Server 3.5.0 is installed
  • AND Patch ESX350-201302401-SG is not installed
    • BACK