NVD

Id
64565  
Name
CVE-2006-5990  
Description
VMWare VirtualCenter client 2.x before 2.0.1 Patch 1 (Build 33643) and 1.4.x before 1.4.1 Patch 1 (Build 33425), when server certificate verification is enabled, does not verify the server"s X.509 certificate when creating an SSL session, which allows remote malicious servers to spoof valid servers via a man-in-the-middle attack.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-11-20  
Modified Date
2011-03-10  
Seq
2006-5990  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
336963 64565 CVE-2006-5990 http://kb.vmware.com/kb/4646606  View
336964 64565 CVE-2006-5990 1017270  View
336965 64565 CVE-2006-5990 20061121 VMSA-2006-0010 - SSL sessions not authenticated by VC Clients  View
336966 64565 CVE-2006-5990 21231  View
336967 64565 CVE-2006-5990 http://www.vmware.com/download/vi/vc-201-200611-patch.html  View
336968 64565 CVE-2006-5990 ADV-2006-4655  View
336969 64565 CVE-2006-5990 vmware-virtualcenter-x509-mitm(30477)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61210 JVNDB-2006-003476 VMWare VirtualCenter クライアントにおける有効なサーバになりすまされる脆弱性 VMWare VirtualCenter クライアントは、サーバ証明検証が有効になっている際、SSL セッション作成時にサーバの X.509 証明を検証しないため、有効なサーバになりすまされる脆弱性が存在します。 CVE-2006-5990 22092 CVE-2006-5990 64565 4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003476.html 2006-11-16 2012-12-20 View