NVD

Id
15822  
Name
CVE-2010-4573  
Description
The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly configure the SFCB authentication mode, which allows remote attackers to obtain access via an arbitrary username and password.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-12-22  
Modified Date
2011-01-11  
Seq
2010-4573  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
89726 15822 CVE-2010-4573 http://kb.vmware.com/kb/1031761  View
89727 15822 CVE-2010-4573 [security-announce] 20101221 VMSA-2010-0020 VMware ESXi 4.1 Update Installer SFCB Authentication Flaw  View
89728 15822 CVE-2010-4573 1024917  View
89729 15822 CVE-2010-4573 20101221 VMSA-2010-0020 VMware ESXi 4.1 Update Installer SFCB Authentication Flaw  View
89730 15822 CVE-2010-4573 45543  View
89731 15822 CVE-2010-4573 http://www.vmware.com/security/advisories/VMSA-2010-0020.html  View
89732 15822 CVE-2010-4573 ADV-2010-3303  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37733 JVNDB-2010-003518 VMware ESXi の Update Installer におけるアクセスを取得される脆弱性 VMware ESXi の Update Installer は、変更された sfcb.cfg が最新の場合、SFCB 認証モードを適切に設定しないため、アクセスを取得される脆弱性が存在します。 CVE-2010-4573 47153 CVE-2010-4573 15822 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003518.html 2010-12-21 2012-03-27 View