CVE

Id
19693  
CVE No.
CVE-2006-3589  
Status
Candidate  
Description
vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key.  
Phase
Assigned (20060713)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
178313 19693 CVE-2006-3589 BUGTRAQ:20060718 VMSA-2006-0003 VMware possible incorrect permissions on SSL key files  View
178314 19693 CVE-2006-3589 URL:http://www.securityfocus.com/archive/1/archive/1/440583/100/0/threaded  View
178315 19693 CVE-2006-3589 BUGTRAQ:20060725 Advisory: VMware Possible Incorrect Permissions On SSL Key Files  View
178316 19693 CVE-2006-3589 URL:http://www.securityfocus.com/archive/1/archive/1/441082/100/0/threaded  View
178317 19693 CVE-2006-3589 BUGTRAQ:20070110 VMware ESX server security updates  View
178318 19693 CVE-2006-3589 URL:http://www.securityfocus.com/archive/1/archive/1/456546/100/200/threaded  View
178319 19693 CVE-2006-3589 CONFIRM:http://kb.vmware.com/kb/2467205  View
178320 19693 CVE-2006-3589 CONFIRM:http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html  View
178321 19693 CVE-2006-3589 CONFIRM:http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html  View
178322 19693 CVE-2006-3589 CONFIRM:http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html  View
178323 19693 CVE-2006-3589 CONFIRM:http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html  View
178324 19693 CVE-2006-3589 BID:19060  View
178325 19693 CVE-2006-3589 URL:http://www.securityfocus.com/bid/19060  View
178326 19693 CVE-2006-3589 BID:19062  View
178327 19693 CVE-2006-3589 URL:http://www.securityfocus.com/bid/19062  View
178328 19693 CVE-2006-3589 VUPEN:ADV-2006-2880  View
178329 19693 CVE-2006-3589 URL:http://www.vupen.com/english/advisories/2006/2880  View
178330 19693 CVE-2006-3589 OSVDB:27418  View
178331 19693 CVE-2006-3589 URL:http://www.osvdb.org/27418  View
178332 19693 CVE-2006-3589 SECTRACK:1016536  View
178333 19693 CVE-2006-3589 URL:http://securitytracker.com/id?1016536  View
178334 19693 CVE-2006-3589 SECUNIA:21120  View
178335 19693 CVE-2006-3589 URL:http://secunia.com/advisories/21120  View
178336 19693 CVE-2006-3589 SECUNIA:23680  View
178337 19693 CVE-2006-3589 URL:http://secunia.com/advisories/23680  View
178338 19693 CVE-2006-3589 XF:vmware-vmwareconfig-file-permissions(27881)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60485 JVNDB-2006-002751 Microsoft Internet Explorer 6 におけるサービス運用妨害 (DoS) の脆弱性 Microsoft Internet Explorer 6 には、サービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2006-3591 19693 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002751.html  View