VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 do not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption) by modifying the client-server data stream.
CVSS Details
- CVSS 3.1 Base Score: 8.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Vmsa 2013 0003 | — | Upgrade VMware ESX 3.5 to build number 988599Upgrade VMware ESXi 5.0 to build number 912577Upgrade VMware ESX 4.1 to build number 874690Upgrade VMware ESXi 3.5 to build number 988599Upgrade VMware ESXi 4.0 to build number 989856Upgrade VMware ESXi 5.1 to build number 911593Upgrade VMware ESXi 4.1 to build number 874690Upgrade VMware ESX 4.0 to build number 989856 | Mar 14, 2013 | Feb 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub