Detections
Analytics
VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2013-0009) (remote check)
medium Nessus Plugin ID 89666
Language:
Synopsis
The remote VMware ESX / ESXi host is missing a security-related patch.Description
The remote VMware ESX / ESXi host is missing a security-related patch.It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party libraries :
- GnuTLS
- Kernel
- OpenSSL
Solution
Apply the appropriate patch according to the vendor advisory that pertains to ESX version 4.0 / 4.1 or ESXi version 4.0 / 4.1.See Also
https://www.vmware.com/security/advisories/VMSA-2013-0009.html
Plugin Details
Severity: Medium
ID: 89666
File Name: vmware_esx_VMSA-2013-0009_remote.nasl
Version: 1.5
Type: remote
Family: Misc.
Published: 3/4/2016
Updated: 12/5/2022
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 6.9
Temporal Score: 5.7
Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/o:vmware:esx, cpe:/o:vmware:esxi
Required KB Items: Host/VMware/version, Host/VMware/release
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 7/31/2013
Vulnerability Publication Date: 2/4/2013
Exploitable With
CANVAS (CANVAS)
Reference Information
CVE: CVE-2013-0166, CVE-2013-0169, CVE-2013-0268, CVE-2013-0338, CVE-2013-0871, CVE-2013-2116