Description
The VMware Consolidated Backup (VCB) command-line utilities in VMware ESX 3.0.1 through 3.0.3 and ESX 3.5 place a password on the command line, which allows local users to obtain sensitive information by listing the process.
References
- GLSA-201209-25 vendor-advisory
- http://www.vmware.com/security/advisories/VMSA-2008-0014.html
- vmware-esx-vcb-info-disclosure(44797) vdb-entry
- 31713 third-party-advisory
- 30937 vdb-entry
- 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues. mailing-list
- 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues. mailing-list
- 1020794 vdb-entry
- 4202 third-party-advisory
- ADV-2008-2466 vdb-entry