Detections
Analytics

VMSA-2013-0004 : VMware ESXi and ESX security update for third-party library

medium Nessus Plugin ID 65735

Language:

Synopsis

The remote VMware ESXi / ESX host is missing a security-related patch.

Description

a. Update to ESX/ESXi libxml2 userworld and service console.

 The ESX/ESXi userworld libxml2 library has been updated to resolve a security issue. Also, the ESX service console libxml2 packages are updated to the following versions:

libxml2-2.6.26-2.1.15.el5_8.6 libxml2-python-2.6.26-2.1.15.el5_8.6

 The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2012-5134 to this issue.

Solution

Apply the missing patch.

See Also

http://lists.vmware.com/pipermail/security-announce/2013/000216.html

Plugin Details

Severity: Medium

ID: 65735

File Name: vmware_VMSA-2013-0004.nasl

Version: 1.13

Type: local

Published: 3/29/2013

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/o:vmware:esx:4.0, cpe:/o:vmware:esx:4.1, cpe:/o:vmware:esxi:4.0, cpe:/o:vmware:esxi:4.1, cpe:/o:vmware:esxi:5.0, cpe:/o:vmware:esxi:5.1

Required KB Items: Host/local_checks_enabled, Host/VMware/release, Host/VMware/version

Exploit Ease: No known exploits are available

Patch Publication Date: 3/28/2013

Reference Information

CVE: CVE-2012-5134

BID: 56684

VMSA: 2013-0004