vendor:
VMware Server
by:
Alessio Dalla Piazza
7,5
CVSS
HIGH
Directory Traversal
22
CWE
Product Name: VMware Server
Affected Version From: 2.0.2
Affected Version To: 2.0.2
Patch Exists: YES
Related CWE: N/A
CPE: a:vmware:vmware_server:2.0.2
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP3 EN
2010
VMware 2 Web Server Directory Traversal
A directory traversal vulnerability exists in VMware 2 Web Server, which allows an attacker to access sensitive files outside of the web root directory. By sending a specially crafted HTTP request, an attacker can traverse the directory structure and access files outside of the web root directory. This can lead to information disclosure and other attacks.
Mitigation:
Upgrade to the latest version of VMware 2 Web Server.
