CVE-2005-3619: XSS

Published Dec 31, 2005

Updated

Cross-site scripting (XSS) vulnerability in the management interface for VMware ESX 2.5.x before 2.5.2 upgrade patch 2, 2.1.x before 2.1.2 upgrade patch 6, and 2.0.x before 2.0.1 upgrade patch 6 allows remote attackers to inject arbitrary web script or HTML via messages that are not sanitized when viewing syslog log files.

Affected Software

6 affected components

VMware ESX=2.0

VMware ESX=2.0.1

VMware ESX=2.1.1

VMware ESX=2.1.2

VMware ESX=2.5

VMware ESX=2.5.2

Event History

Dec 31, 2005

CVE Published

05:00 AM

Jun 2, 2006

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-3619?

CVE-2005-3619 is considered a moderate severity vulnerability due to its exploitation potential that could allow remote attackers to conduct cross-site scripting attacks.

How do I fix CVE-2005-3619?

To fix CVE-2005-3619, upgrade VMware ESX to version 2.5.2 upgrade patch 2, 2.1.2 upgrade patch 6, or 2.0.1 upgrade patch 6 or later.

What systems are affected by CVE-2005-3619?

CVE-2005-3619 affects VMware ESX versions 2.0, 2.0.1, 2.1.1, 2.1.2, and 2.5.x prior to the respective upgrade patches.

What kind of attacks can CVE-2005-3619 enable?

CVE-2005-3619 can enable remote attackers to inject arbitrary web script or HTML into the management interface.

Is CVE-2005-3619 still a concern for users of VMware ESX?

For users of unsupported versions of VMware ESX, CVE-2005-3619 remains a concern, necessitating immediate upgrade to a patched version.