VMSA-2019-0013 : Command injection and information disclosure vulnerabilities

high Nessus Plugin ID 128994

Language:

Synopsis

The remote VMware ESXi host is missing one or more security-related patches.

Description

a. VMware ESXi busybox command injection vulnerability

ESXi contains a command injection vulnerability due to the use of vulnerable version of busybox that does not sanitize filenames which may result into executing any escape sequence in the shell.

An attacker may exploit this issue by tricking an ESXi Admin into executing shell commands by providing a malicious file.

b. ESXi Host Client information disclosure vulnerability

An information disclosure vulnerability in clients arising from insufficient session expiration.

An attacker with physical access or an ability to mimic a websocket connection to a users browser may be able to obtain control of a VM Console after the user has logged out or their session has timed out.

Solution

Apply the missing patches.

Plugin Details

Severity: High

ID: 128994

File Name: vmware_VMSA-2019-0013.nasl

Version: 1.5

Type: local

Family: VMware ESX Local Security Checks

Published: 9/18/2019

Updated: 4/24/2024

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Medium

Base Score: 6.5

Temporal Score: 5.1

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS Score Source: CVE-2017-16544

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 7.9

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:vmware:esxi:6.0, cpe:/o:vmware:esxi:6.5, cpe:/o:vmware:esxi:6.7

Required KB Items: Host/local_checks_enabled, Host/VMware/release, Host/VMware/version

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 9/16/2019

Vulnerability Publication Date: 11/20/2017

Reference Information

CVE: CVE-2017-16544, CVE-2019-5531

IAVA: 2019-A-0344

VMSA: 2019-0013

Detections

Analytics