CVE-2013-1405
Last modified
CVE-2013-1405 is a vulnerability of currently unknown severity. VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 before Update 3a, VMware VI-Client 2.5, VMware ESXi 3.5 through 4.1, and VMware ESX 3.5 through 4.1 do not properly implement the management authentication protocol, which allow remote servers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.. EPSS estimates a 2.80% chance of exploitation in the next 30 days.
Description
VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 before Update 3a, VMware VI-Client 2.5, VMware ESXi 3.5 through 4.1, and VMware ESX 3.5 through 4.1 do not properly implement the management authentication protocol, which allow remote servers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Vmware | Vcenter Server | 4.0 | Update 4 |
| Vmware | Vcenter Server | 4.1 | Update 3 |
| Vmware | Virtualcenter | 2.5 | — |
| Vmware | Vsphere Client | 4.0 | Update 4 |
| Vmware | Vsphere Client | 4.1 | Update 3 |
| Vmware | Vi-Client | 2.5 | — |
| Vmware | Esxi | 3.5 | — |
| Vmware | Esxi | 4.0 | — |
| Vmware | Esxi | 4.1 | — |
| Vmware | Esx | 3.5 | — |
| Vmware | Esx | 4.0 | — |
| Vmware | Esx | 4.1 | — |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-1405?
How severe is CVE-2013-1405?
How do I fix CVE-2013-1405?
Are you affected by CVE-2013-1405?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST