CVE-2006-2481 - VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials

CVE-2006-2481

Summary

VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and vmware.mui.sid cookies, which allows attackers to gain privileges by obtaining the cookies using attacks such as cross-site scripting (CVE-2005-3619).

References

Vulnerable Configurations

cpe:2.3:o:vmware:esx:2.0:*:*:*:*:*:*:*
cpe:2.3:o:vmware:esx:2.0:*:*:*:*:*:*:*
cpe:2.3:o:vmware:esx:2.0.1:*:*:*:*:*:*:*
cpe:2.3:o:vmware:esx:2.0.1:*:*:*:*:*:*:*
cpe:2.3:o:vmware:esx:2.1:*:*:*:*:*:*:*
cpe:2.3:o:vmware:esx:2.1:*:*:*:*:*:*:*
cpe:2.3:o:vmware:esx:2.1.1:*:*:*:*:*:*:*
cpe:2.3:o:vmware:esx:2.1.1:*:*:*:*:*:*:*
cpe:2.3:o:vmware:esx:2.1.2:*:*:*:*:*:*:*
cpe:2.3:o:vmware:esx:2.1.2:*:*:*:*:*:*:*
cpe:2.3:o:vmware:esx:2.5:*:*:*:*:*:*:*
cpe:2.3:o:vmware:esx:2.5:*:*:*:*:*:*:*
cpe:2.3:o:vmware:esx:2.5.2:*:*:*:*:*:*:*
cpe:2.3:o:vmware:esx:2.5.2:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 30-10-2018 - 16:26)
Impact:
Exploitability:

CWE

CWE-255

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:N/A:N

refmap via4

bid	19249
bugtraq	20060731 Corsaire Security Advisory - VMware ESX Server Password Disclosure in Cookie issue 20060801 VMSA-2006-0004 Cross site scripting vulnerability and other fixes
confirm	http://kb.vmware.com/kb/2118366
misc	http://www.corsaire.com/advisories/c060512-001.txt
secunia	21230
vupen	ADV-2006-3075

Last major update

30-10-2018 - 16:26

Published

31-07-2006 - 19:04

Last modified

30-10-2018 - 16:26