Lucene search

[email protected]CVE-2005-4583

HistoryDec 29, 2005 - 11:03 a.m.

CVE-2005-4583

2005-12-2911:03:00

CWE-79

[email protected]

web.nvd.nist.gov

vmware

esx server

vulnerability

remote code execution

web browser

xss

cross-site scripting

cve-2005-4583

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.9 Medium

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.6%

JSON

Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 December 2005 allows “remote code execution in the Web browser” via unspecified attack vectors, probably related to cross-site scripting (XSS).

Affected configurations

NVD

Node

vmwareesxMatch2.0

vmwareesxMatch2.0.1

vmwareesxMatch2.1.1

vmwareesxMatch2.1.2

vmwareesxMatch2.5

vmwareesxMatch2.5.2

CPENameOperatorVersion
vmware:esxvmware esxeq2.0
vmware:esxvmware esxeq2.0.1
vmware:esxvmware esxeq2.1.1
vmware:esxvmware esxeq2.1.2
vmware:esxvmware esxeq2.5
vmware:esxvmware esxeq2.5.2

CPE	Name	Operator	Version
vmware:esx	vmware esx	eq	2.0
vmware:esx	vmware esx	eq	2.0.1
vmware:esx	vmware esx	eq	2.1.1
vmware:esx	vmware esx	eq	2.1.2
vmware:esx	vmware esx	eq	2.5
vmware:esx	vmware esx	eq	2.5.2

References

secunia.com/advisories/18250

securitytracker.com/id?1015422

www.osvdb.org/22119

www.securityfocus.com/bid/16086

www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2001

www.vupen.com/english/advisories/2005/3084

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.9 Medium

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.6%

JSON

Related for CVE-2005-4583

cvelist1 nvd1