Description
Directory traversal vulnerability in VMWare ESXi 3.5 before ESXe350-200810401-O-UG and ESX 3.5 before ESX350-200810201-UG allows administrators with the Datastore.FileManagement privilege to gain privileges via unknown vectors.
References
- [Security-announce] 20081106 VMSA-2008-0018 VMware Hosted products and patches for ESX and ESXi resolve two security issues mailing-list
- 32172 vdb-entry
- 20081107 VMSA-2008-0018 VMware Hosted products and patches for ESX and ESXi resolve two security issues mailing-list
- oval:org.mitre.oval:def:6425 vdb-entry signature
- vmware-virtualcenter-directory-traversal(46418) vdb-entry
- 32624 third-party-advisory
- 1021155 vdb-entry
- http://www.vmware.com/security/advisories/VMSA-2008-0018.html
- ADV-2008-3052 vdb-entry