CVE-2006-3589

Severity Score

3.6

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key.

vmware-config.pl en VMware for Linux, ESX Server 2.x, y Infrastructure 3 no valida el código de retorno desde la llamada a la función Perl chmod, lo cual podría permitir un fichero llave SSL sea creado con una umask no segura que permite a usuarios locales leer o modificar la llave SSL.

*Credits: N/A

CVSS Scores

NISTv2 3.6

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-07-13 CVE Reserved
2006-07-19 CVE Published
2023-03-08 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (16)

URL	Tag	Source
http://kb.vmware.com/kb/2467205	X_refsource_confirm
http://secunia.com/advisories/23680	Third Party Advisory
http://securitytracker.com/id?1016536	Vdb Entry
http://www.osvdb.org/27418	Vdb Entry
http://www.securityfocus.com/archive/1/440583/100/0/threaded	Mailing List
http://www.securityfocus.com/archive/1/441082/100/0/threaded	Mailing List
http://www.securityfocus.com/archive/1/456546/100/200/threaded	Mailing List
http://www.securityfocus.com/bid/19060	Vdb Entry
http://www.securityfocus.com/bid/19062	Vdb Entry
http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html	X_refsource_confirm
http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html	X_refsource_confirm
http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html	X_refsource_confirm
http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html	X_refsource_confirm
http://www.vupen.com/english/advisories/2006/2880	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/27881	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/21120	2018-10-30

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Vmware Search vendor "Vmware"		Infrastructure Search vendor "Vmware" for product "Infrastructure"				3 Search vendor "Vmware" for product "Infrastructure" and version "3"		-		Affected
Vmware Search vendor "Vmware"		Player Search vendor "Vmware" for product "Player"				*		-		Affected
Vmware Search vendor "Vmware"		Server Search vendor "Vmware" for product "Server"				1.0.1_build_29996 Search vendor "Vmware" for product "Server" and version "1.0.1_build_29996"		-		Affected
Vmware Search vendor "Vmware"		Workstation Search vendor "Vmware" for product "Workstation"				5.5.3 Search vendor "Vmware" for product "Workstation" and version "5.5.3"		-		Affected
Vmware Search vendor "Vmware"		Esx Search vendor "Vmware" for product "Esx"				2.0 Search vendor "Vmware" for product "Esx" and version "2.0"		-		Affected
Vmware Search vendor "Vmware"		Esx Search vendor "Vmware" for product "Esx"				2.0.1 Search vendor "Vmware" for product "Esx" and version "2.0.1"		-		Affected
Vmware Search vendor "Vmware"		Esx Search vendor "Vmware" for product "Esx"				2.1 Search vendor "Vmware" for product "Esx" and version "2.1"		-		Affected
Vmware Search vendor "Vmware"		Esx Search vendor "Vmware" for product "Esx"				2.1.1 Search vendor "Vmware" for product "Esx" and version "2.1.1"		-		Affected
Vmware Search vendor "Vmware"		Esx Search vendor "Vmware" for product "Esx"				2.1.2 Search vendor "Vmware" for product "Esx" and version "2.1.2"		-		Affected
Vmware Search vendor "Vmware"		Esx Search vendor "Vmware" for product "Esx"				2.5 Search vendor "Vmware" for product "Esx" and version "2.5"		-		Affected
Vmware Search vendor "Vmware"		Esx Search vendor "Vmware" for product "Esx"				2.5.2 Search vendor "Vmware" for product "Esx" and version "2.5.2"		-		Affected