VMSA-2013-0004 : VMware ESXi and ESX security update for third-party library

Medium Nessus Plugin ID 65735


The remote VMware ESXi / ESX host is missing a security-related patch.


a. Update to ESX/ESXi libxml2 userworld and service console.

The ESX/ESXi userworld libxml2 library has been updated to resolve a security issue. Also, the ESX service console libxml2 packages are updated to the following versions:

libxml2-2.6.26-2.1.15.el5_8.6 libxml2-python-2.6.26-2.1.15.el5_8.6

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2012-5134 to this issue.


Apply the missing patch.

See Also


Plugin Details

Severity: Medium

ID: 65735

File Name: vmware_VMSA-2013-0004.nasl

Version: $Revision: 1.11 $

Type: local

Published: 2013/03/29

Modified: 2015/01/26

Dependencies: 12634

Risk Information

Risk Factor: Medium


Base Score: 6.8

Temporal Score: 5.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/o:vmware:esx:4.0, cpe:/o:vmware:esx:4.1, cpe:/o:vmware:esxi:4.0, cpe:/o:vmware:esxi:4.1, cpe:/o:vmware:esxi:5.0, cpe:/o:vmware:esxi:5.1

Required KB Items: Host/local_checks_enabled, Host/VMware/release, Host/VMware/version

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2013/03/28

Reference Information

CVE: CVE-2012-5134

BID: 56684

OSVDB: 87882

VMSA: 2013-0004