CVEvulnerability

CVE-2013-1405

10.0 HIGH Published 2013-02-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-02-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-287

Description

VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 before Update 3a, VMware VI-Client 2.5, VMware ESXi 3.5 through 4.1, and VMware ESX 3.5 through 4.1 do not properly implement the management authentication protocol, which allow remote servers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Affected configurations

• vmware vcenter server 4.0 • vmware vcenter server 4.1 • vmware virtualcenter 2.5 • vmware vsphere client 4.0 • vmware vsphere client 4.1 • vmware vi-client 2.5 • vmware esxi 3.5 • vmware esxi 4.0 • vmware esxi 4.1 • vmware esx 3.5 • vmware esx 4.0 • vmware esx 4.1

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References