Lucene search

[email protected]CVE-2013-1659

HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-1659

2022-10-0316:14:47

[email protected]

web.nvd.nist.gov

vmware

vcenter server

esxi

nfc protocol

man-in-the-middle

code execution

denial of service

cve-2013-1659

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.001

Percentile

46.1%

JSON

VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 do not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption) by modifying the client-server data stream.

Affected configurations

NVD

Node

vmwarevcenter_serverMatch4.0

vmwarevcenter_serverMatch4.0update_1

vmwarevcenter_serverMatch4.0update_2

vmwarevcenter_serverMatch4.0update_3

vmwarevcenter_serverMatch4.0update_4

vmwarevcenter_serverMatch4.0update_4a

Node

vmwarevcenter_server_applianceMatch5.1

vmwarevcenter_server_applianceMatch5.1.0a

Node

vmwarevcenter_serverMatch5.0

vmwarevcenter_serverMatch5.0update_1

Node

vmwareesxiMatch3.5

vmwareesxiMatch3.51

vmwareesxiMatch4.0

vmwareesxiMatch4.01

vmwareesxiMatch4.02

vmwareesxiMatch4.03

vmwareesxiMatch4.04

vmwareesxiMatch4.1

vmwareesxiMatch4.11

vmwareesxiMatch4.12

vmwareesxiMatch5.0

vmwareesxiMatch5.01

vmwareesxiMatch5.02

vmwareesxiMatch5.1

Node

vmwareesxiMatch3.5

vmwareesxiMatch3.51

vmwareesxiMatch4.0

vmwareesxiMatch4.01

vmwareesxiMatch4.02

vmwareesxiMatch4.03

vmwareesxiMatch4.04

vmwareesxiMatch4.1

VendorProductVersionCPE
vmwarevcenter_server4.0cpe:/a:vmware:vcenter_server:4.0:::
vmwarevcenter_server4.0cpe:/a:vmware:vcenter_server:4.0:update_4a::
vmwarevcenter_server4.0cpe:/a:vmware:vcenter_server:4.0:update_1::
vmwarevcenter_server4.0cpe:/a:vmware:vcenter_server:4.0:update_4::
vmwarevcenter_server4.0cpe:/a:vmware:vcenter_server:4.0:update_3::
vmwarevcenter_server4.0cpe:/a:vmware:vcenter_server:4.0:update_2::

Vendor	Product	Version	CPE
vmware	vcenter_server	4.0	cpe:/a:vmware:vcenter_server:4.0:::
vmware	vcenter_server	4.0	cpe:/a:vmware:vcenter_server:4.0:update_4a::
vmware	vcenter_server	4.0	cpe:/a:vmware:vcenter_server:4.0:update_1::
vmware	vcenter_server	4.0	cpe:/a:vmware:vcenter_server:4.0:update_4::
vmware	vcenter_server	4.0	cpe:/a:vmware:vcenter_server:4.0:update_3::
vmware	vcenter_server	4.0	cpe:/a:vmware:vcenter_server:4.0:update_2::