CVEvulnerability

CVE-2006-3589

3.6 LOW Published 2006-07-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-07-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N

Description

vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key.

Affected configurations

• vmware infrastructure 3 • vmware player • vmware server 1.0.1 build 29996 • vmware workstation 5.5.3 • vmware esx 2.0 • vmware esx 2.0.1 • vmware esx 2.1 • vmware esx 2.1.1 • vmware esx 2.1.2 • vmware esx 2.5 • vmware esx 2.5.2

References