CVE

Id
33631  
CVE No.
CVE-2008-3514  
Status
Candidate  
Description
VMware VirtualCenter 2.5 before Update 2 and 2.0.2 before Update 5 relies on client-side "enabled/disabled functionality" for access control, which allows remote attackers to determine valid user names by enabling functionality in the GUI and then making an "attempt to assign permissions to other system users."  
Phase
Assigned (20080807)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
366061 33631 CVE-2008-3514 BUGTRAQ:20080812 VMSA-2008-0012 Updated VirtualCenter addresses User Account Disclosure Vulnerability  View
366062 33631 CVE-2008-3514 URL:http://www.securityfocus.com/archive/1/archive/1/495386/100/0/threaded  View
366063 33631 CVE-2008-3514 MISC:http://www.insomniasec.com/advisories/ISVA-080812.1.htm  View
366064 33631 CVE-2008-3514 CONFIRM:http://www.vmware.com/support/vi3/doc/releasenotes_vc202u5.html  View
366065 33631 CVE-2008-3514 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2008-0012.html  View
366066 33631 CVE-2008-3514 BID:30664  View
366067 33631 CVE-2008-3514 URL:http://www.securityfocus.com/bid/30664  View
366068 33631 CVE-2008-3514 VUPEN:ADV-2008-2363  View
366069 33631 CVE-2008-3514 URL:http://www.vupen.com/english/advisories/2008/2363  View
366070 33631 CVE-2008-3514 SECTRACK:1020693  View
366071 33631 CVE-2008-3514 URL:http://www.securitytracker.com/id?1020693  View
366072 33631 CVE-2008-3514 SECUNIA:31468  View
366073 33631 CVE-2008-3514 URL:http://secunia.com/advisories/31468  View
366074 33631 CVE-2008-3514 SREASON:4150  View
366075 33631 CVE-2008-3514 URL:http://securityreason.com/securityalert/4150  View
366076 33631 CVE-2008-3514 XF:virtualcenter-backend-info-disclosure(44425)  View

Related JVN