Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

CVE-2003-1291

Published

20 years ago

Last Modified

5 months ago

CVSSv2.0 Severity

High

Impact Analysis

Share on Facebook
Share on LinkedIn
Share on Twitter

VMware ESX Server 1.5.2 before Patch 4 allows local users to execute arbitrary programs as root via certain modified VMware ESX Server environment variables..

CVSSv2.0 Score

Severity: High
Base Score: 7.2/10
Exploit Score: 3.9/10
Access Vector: Local
Access Complexity: Low
Authentication Required: None
Impact Score: 10/10
Confidentiality Impact: Complete
Availability Impact: Complete
Integrity Impact: Complete

Products Affected

CPE	Affected	Vulnerable	Excluding
cpe:2.3:o:vmware:esx:1.5.2:patch3::::::	Yes	-	-
cpe:2.3:o:vmware:esx:1.5.2:patch1::::::	Yes	-	-
cpe:2.3:o:vmware:esx:1.5.2:patch2::::::	Yes	-	-

References

http://www.vmware.com/download/esx/esx152-patch4.html
http://www.osvdb.org/21585
http://www.vmware.com/support/kb/enduser/std_adp.php?p_sid=dsxk%2ABWh&p_lva=&p_faqid=110