CVE

Id
42246  
CVE No.
CVE-2009-4811  
Status
Candidate  
Description
VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware ACE 2.6 before 2.6.1 build 227600 and 2.5.x before 2.5.4 build 246459, and VMware Server 2.x allows remote attackers to cause a denial of service (process crash) via a x25x90 sequence in the USER and PASS commands, a related issue to CVE-2009-3707. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20100427)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
461799 42246 CVE-2009-4811 BUGTRAQ:20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues  View
461800 42246 CVE-2009-4811 URL:http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html  View
461801 42246 CVE-2009-4811 FULLDISC:20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues  View
461802 42246 CVE-2009-4811 URL:http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html  View
461803 42246 CVE-2009-4811 MLIST:[security-announce] 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues  View
461804 42246 CVE-2009-4811 URL:http://lists.vmware.com/pipermail/security-announce/2010/000090.html  View
461805 42246 CVE-2009-4811 MISC:http://freetexthost.com/qr1tffkzpu  View
461806 42246 CVE-2009-4811 MISC:http://pocoftheday.blogspot.com/2009/10/vmware-server-20x-remote-dos-exploit.html  View
461807 42246 CVE-2009-4811 MISC:http://www.vmware.com/security/advisories/VMSA-2010-0007.html  View
461808 42246 CVE-2009-4811 GENTOO:GLSA-201209-25  View
461809 42246 CVE-2009-4811 URL:http://security.gentoo.org/glsa/glsa-201209-25.xml  View
461810 42246 CVE-2009-4811 BID:36630  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39345 JVNDB-2010-005130 Serv-U におけるディレクトリトラバーサルの脆弱性 Serv-U には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2009-4815 42246 4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005130.html  View