CVEvulnerability

CVE-2013-1659

7.6 HIGH Published 2013-02-22 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-02-22
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C

Description

VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 do not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption) by modifying the client-server data stream.

Affected configurations

• vmware vcenter server 4.0 • vmware vcenter server appliance 5.1 • vmware vcenter server appliance 5.1.0a • vmware vcenter server 5.0 • vmware esxi 3.5 • vmware esxi 4.0 • vmware esxi 4.1 • vmware esxi 5.0 • vmware esxi 5.1

References