Evil-DB LogoEvil-DB
← All CVEs

CVE-2009-3733

medium · 5

Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors.

5
CVSS
83.4%
EPSS (exploit prob.)
100th
EPSS percentile
2009-11-02
Published

AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

CWE-22

Affected products

VendorProductAffected versions
vmwareesx3.0.3
vmwareesx3.5
vmwareesxi3.5
vmwareserver1.0
vmwareserver1.0.1
vmwareserver1.0.1_build_29996
vmwareserver1.0.2
vmwareserver1.0.3
vmwareserver1.0.4
vmwareserver1.0.4_build_56528
vmwareserver1.0.5
vmwareserver1.0.6
vmwareserver1.0.7
vmwareserver1.0.8
vmwareserver1.0.9
vmwareserver2.0.0
vmwareserver2.0.1
linuxlinux_kernelall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-3733