Oval Definition:oval:org.mitre.oval:def:24054
Revision Date:2014-04-28Version:5
Title:VMware ESXi and ESX unauthorized file access through vCenter Server and ESX
Description:VMware ESXi 4.0 through 5.5 and ESX 4.0 and 4.1 allow local users to read or modify arbitrary files by leveraging the Virtual Machine Power User or Resource Pool Administrator role for a vCenter Server Add Existing Disk action with a (1) -flat, (2) -rdm, or (3) -rdmp filename.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2013-5973
Platform(s):VMWare ESX Server 4.0
VMWare ESX Server 4.1
Product(s):
Definition Synopsis
  • Patch ESX410-201312401-SG is not installed
  • VMware ESX Server 4.1 is installed
  • AND Patch ESX410-201312401-SG is not installed
  • OR Patch ESX400-201310401-SG is not installed
  • VMware ESX Server 4.0 is installed
  • AND Patch ESX400-201310401-SG is not installed
  • BACK