Test ID:	1.3.6.1.4.1.25623.1.0.100502
Category:	Remote file access
Title:	VMware Products Directory Traversal Vulnerability
Summary:	The host is installed with VMWare product(s)and is prone to multiple; vulnerability.
Description:	Summary: The host is installed with VMWare product(s)and is prone to multiple vulnerability. Vulnerability Insight: An error exists while handling certain requests can be exploited to download arbitrary files from the host system via directory traversal attacks. Vulnerability Impact: Successful exploitation will let the remote/local attacker to disclose sensitive information. Affected Software/OS: VMware Server version 2.0.x prior to 2.0.2 Build 203138, VMware Server version 1.0.x prior to 1.0.10 Build 203137 on Linux. Solution: Upgrade the VMWare product(s) according to the referenced vendor announcement. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	BugTraq ID: 36842 Common Vulnerability Exposure (CVE) ID: CVE-2009-3733 http://www.securityfocus.com/bid/36842 Bugtraq: 20091027 VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues (Google Search) http://www.securityfocus.com/archive/1/507523/100/0/threaded http://security.gentoo.org/glsa/glsa-201209-25.xml http://lists.vmware.com/pipermail/security-announce/2009/000069.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7822 http://securitytracker.com/id?1023088 http://securitytracker.com/id?1023089 http://secunia.com/advisories/37186 http://www.vupen.com/english/advisories/2009/3062
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.