Lucene search

[email protected]CVE-2006-2481

HistoryJul 31, 2006 - 7:04 p.m.

CVE-2006-2481

2006-07-3119:04:00

CWE-255

[email protected]

web.nvd.nist.gov

vmware

esx server

authentication credentials

security vulnerability

cve-2006-2481

6.4 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.013 Low

EPSS

Percentile

85.9%

JSON

VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and vmware.mui.sid cookies, which allows attackers to gain privileges by obtaining the cookies using attacks such as cross-site scripting (CVE-2005-3619).

CPENameOperatorVersion
vmware:esxvmware esxeq2.0
vmware:esxvmware esxeq2.0.1
vmware:esxvmware esxeq2.1.2
vmware:esxvmware esxeq2.5
vmware:esxvmware esxeq2.5.2
vmware:esxvmware esxeq2.1.1
vmware:esxvmware esxeq2.1

CPE	Name	Operator	Version
vmware:esx	vmware esx	eq	2.0
vmware:esx	vmware esx	eq	2.0.1
vmware:esx	vmware esx	eq	2.1.2
vmware:esx	vmware esx	eq	2.5
vmware:esx	vmware esx	eq	2.5.2
vmware:esx	vmware esx	eq	2.1.1
vmware:esx	vmware esx	eq	2.1

References

kb.vmware.com/kb/2118366

secunia.com/advisories/21230

www.corsaire.com/advisories/c060512-001.txt

www.securityfocus.com/archive/1/441728/100/100/threaded

www.securityfocus.com/archive/1/441825/100/100/threaded

www.securityfocus.com/bid/19249

www.vupen.com/english/advisories/2006/3075

6.4 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.013 Low

EPSS

Percentile

85.9%

JSON

Related for CVE-2006-2481

prion1 securityvulns3 cve2