Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2013-5973
HistoryDec 23, 2013 - 3:42 p.m.

CVE-2013-5973

2013-12-2315:42:30
CWE-264
mitre
web.nvd.nist.gov
30
vmware
esxi
esx
vcenter server
cve-2013-5973
nvd
security vulnerability

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.2

Confidence

Low

EPSS

0

Percentile

5.1%

JSON

VMware ESXi 4.0 through 5.5 and ESX 4.0 and 4.1 allow local users to read or modify arbitrary files by leveraging the Virtual Machine Power User or Resource Pool Administrator role for a vCenter Server Add Existing Disk action with a (1) -flat, (2) -rdm, or (3) -rdmp filename.

Affected configurations

Nvd
Node
vmwareesxMatch4.0
OR
vmwareesxMatch4.1
Node
vmwareesxiMatch4.0
OR
vmwareesxiMatch4.01
OR
vmwareesxiMatch4.02
OR
vmwareesxiMatch4.03
OR
vmwareesxiMatch4.04
OR
vmwareesxiMatch4.1
OR
vmwareesxiMatch4.11
OR
vmwareesxiMatch4.12
OR
vmwareesxiMatch5.0
OR
vmwareesxiMatch5.01
OR
vmwareesxiMatch5.02
OR
vmwareesxiMatch5.1
OR
vmwareesxiMatch5.11
OR
vmwareesxiMatch5.5
VendorProductVersionCPE
vmwareesx4.0cpe:/o:vmware:esx:4.0:::
vmwareesx4.1cpe:/o:vmware:esx:4.1:::

Related

nessus 6
openvas 4
vmware 1
securityvulns 2
prion 1
nvd 1
cvelist 1
jvn 1
nessus
nessus
VMSA-2013-0016 : VMware ESXi and ESX unauthorized file access through vCenter Server and ESX
2013-12-23 00:00:00
ESXi 5.1 < Build 1312873 File Descriptors Privilege Escalation (remote check)
2013-12-31 00:00:00
ESXi 5.5 < Build 1474526 File Descriptors Privilege Escalation (remote check)
2013-12-31 00:00:00
openvas
openvas
VMware ESXi/ESX unauthorized file access through vCenter Server and ESX (VMSA-2013-0016) - Local Check
2013-12-27 00:00:00
VMware ESXi/ESX unauthorized file access through vCenter Server and ESX (VMSA-2013-0016) - Remote Version Check
2013-12-27 00:00:00
VMSA-2013-0016 VMware ESXi and ESX unauthorized file access through vCenter Server and ESX (remote check)
2013-12-27 00:00:00
vmware
vmware
VMware ESXi and ESX unauthorized file access through vCenter Server and ESX
2013-12-22 00:00:00
securityvulns
securityvulns
VMWare ESX / ESXi privilege escalation
2013-12-24 00:00:00
NEW VMSA-2013-0016 VMware ESXi and ESX unauthorized file access through vCenter Server and ESX
2013-12-24 00:00:00
prion
prion
Design/Logic Flaw
2013-12-23 15:42:00
nvd
nvd
CVE-2013-5973
2013-12-23 15:42:30
cvelist
cvelist
CVE-2013-5973
2013-12-23 15:00:00
jvn
jvn
JVN#13154935: VMware ESX and ESXi may allow access to arbitrary files
2013-12-24 00:00:00

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.2

Confidence

Low

EPSS

0

Percentile

5.1%

JSON
Related for CVE-2013-5973
nessus6openvas4vmware1securityvulns2prion1nvd1cvelist1jvn1