CVE-2009-3733
Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors.
- Affected products
- Vmware Esxi, Vmware Server
- Vmware Esx
- = 3.0.3, 3.5
- Vmware Esxi
- = 3.5
- Vmware Server
- = 1.0, 1.0.1, 1.0.1_build_29996, 1.0.2, 1.0.3, 1.0.4, 1.0.4_build_56528, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9
- Fix
- Available
- CVSS 2.0
- 5.0 MEDIUM
- EPSS
- 83.4% (100th percentile)
- Weakness
- CWE-22
- NVD status
- Modified
- Published
- 2009-11-02
CVE-2009-3733 at NVD
8 known exploits for CVE-2009-3733
Proof-of-concept code and exploit modules indexed by Sploitus
VMware Server Directory Traversal
VMware Server Directory Traversal Vulnerability
VMware Server <= 2.0.1,ESXi Server <= 3.5 Directory Traversal Vulnerability
Vmware Server File Disclosure
DSquare Exploit Pack: D2SEC_VMWARE_DIRTRAV
DSquare Exploit Pack: D2SEC_VMWARE
VMware Server 2.0.1 ESXi Server 3.5 - Directory Traversal
VMware Server 2.0.1 / ESXi Server 3.5 - Directory Traversal