Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.801309
Kategorie:General
Titel:VMware WebAccess Multiple Vulnerabilities (Linux)
Zusammenfassung:This host is installed with VMWare Server and is prone to; multiple Vulnerabilities.
Beschreibung:Summary:
This host is installed with VMWare Server and is prone to
multiple Vulnerabilities.

Vulnerability Insight:
The flaws are due to:

- An error in handling of 'proxy-server' functionality, allows to leverage
proxy-server functionality to spoof the origin of requests via unspecified vectors.

- An insufficient checking on the 'names' of virtual machines, allows for
execution of JavaScript in the Web browser's security context for WebAccess.

Vulnerability Impact:
Successful exploitation will let attackers to spoof the origin of requests
via unspecified vectors and execution of JavaScript.

Affected Software/OS:
VMware Server version 2.0 on Linux.

Solution:
Apply the workaround described in the referenced techresources.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: BugTraq ID: 39037
BugTraq ID: 39105
Common Vulnerability Exposure (CVE) ID: CVE-2010-0686
http://www.securityfocus.com/bid/39037
http://lists.vmware.com/pipermail/security-announce/2010/000086.html
http://www.securitytracker.com/id?1023769
Common Vulnerability Exposure (CVE) ID: CVE-2010-1193
CopyrightCopyright (C) 2010 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.