nvd-json-data-feeds/CVE-2009/CVE-2009-37xx/CVE-2009-3733.json

{
  "id": "CVE-2009-3733",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2009-11-02T15:30:00.813",
  "lastModified": "2018-10-10T19:47:31.733",
  "vulnStatus": "Modified",
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de salto de directorio en VMware Server v1.x anteriores a v1.0.10 build 203137 y v2.x anteriores a v2.0.2 build 203138 en Linux, VMware ESXi v3.5 y VMware ESX v3.0.3 y v3.5 permite a atacantes remotos leer ficheros de su elecci\u00f3n a trav\u00e9s de vectores de ataque sin especificar."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "accessVector": "NETWORK",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0
        },
        "baseSeverity": "MEDIUM",
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "configurations": [
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:esx:3.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B6F7416-E694-4EC9-9FE5-0C24448ECB34"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:esx:3.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE5ECA1B-7415-4390-8018-670F2C3CDF35"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:esxi:3.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD59C463-F352-4F6C-853F-415E3FB4ABDD"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:server:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "73EC33AB-E92A-4AA8-A523-C341133BB515"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:server:1.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "53197903-0614-4460-8944-C1B5257D71A0"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:server:1.0.1_build_29996:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB051A5C-5F66-4732-949A-48B0FDE4AFF1"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:server:1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "F037B05F-6F92-4BE1-B672-F677CBEFD075"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "B8DD6D27-1335-44EF-8B69-A9163A67BC2D"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:server:1.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6BFEAE8-0118-4548-A6EA-E90FA8FE7AF9"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:server:1.0.4_build_56528:*:*:*:*:*:*:*",
              "matchCriteriaId": "87489138-7756-453C-A149-F2C4F95EFF9A"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:server:1.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "42049891-38B7-4BB7-8DA5-A87169E2D958"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:server:1.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "07139DF7-C36B-4FED-8558-7FA49BE0BCFF"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:server:1.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "7E0D7307-5946-45DC-88D3-6BC72EF50184"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:server:1.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "89699BB6-9E41-41DC-B597-B45CA05313A8"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:server:1.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "9C9D09AC-7D9B-4150-86BC-19F44F6F2CA8"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:server:2.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "5A2543D5-AE09-4E90-B27E-95075BE4ACBF"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:server:2.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E6CFDD84-A482-42C2-B43F-839F4D7F1130"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:o:linux:linux:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0CB340E1-C27D-4D36-A3B3-ABAB84667A53"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://lists.vmware.com/pipermail/security-announce/2009/000069.html",
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://security.gentoo.org/glsa/glsa-201209-25.xml",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1023088",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1023089",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/507523/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/36842",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vmware.com/security/advisories/VMSA-2009-0015.html",
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/3062",
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7822",
      "source": "cve@mitre.org"
    }
  ]
}