NVD

Id
62263  
Name
CVE-2006-3589  
Description
vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-07-21  
Modified Date
2011-03-07  
Seq
2006-3589  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
322605 62263 CVE-2006-3589 http://kb.vmware.com/kb/2467205  View
322606 62263 CVE-2006-3589 1016536  View
322607 62263 CVE-2006-3589 20060718 VMSA-2006-0003 VMware possible incorrect permissions on SSL key files  View
322608 62263 CVE-2006-3589 20060725 Advisory: VMware Possible Incorrect Permissions On SSL Key Files  View
322609 62263 CVE-2006-3589 20070110 VMware ESX server security updates  View
322610 62263 CVE-2006-3589 19060  View
322611 62263 CVE-2006-3589 19062  View
322612 62263 CVE-2006-3589 http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html  View
322613 62263 CVE-2006-3589 http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html  View
322614 62263 CVE-2006-3589 http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html  View
322615 62263 CVE-2006-3589 http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html  View
322616 62263 CVE-2006-3589 ADV-2006-2880  View
322617 62263 CVE-2006-3589 vmware-vmwareconfig-file-permissions(27881)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60484 JVNDB-2006-002750 Linux 用の VMware などの vmware-config.pl における SSL 鍵を読み取られる脆弱性 Linux 用の VMware、ESX Server、および Infrastructure の vmware-config.pl は、Perl chmod 関数呼び出しからのリターンコードをチェックしないため、安全でない umask で SSL 鍵ファイルが作成される状態となり、SSL 鍵を読み取られる、または変更される脆弱性が存在します。 CVE-2006-3589 19691 CVE-2006-3589 62263 3.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002750.html 2006-07-21 2012-12-20 View