CVE-2011-1789
First published: Mon May 09 2011(Updated: )
The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, VMware ESXi 4.x before 4.1 Update 1, and VMware ESX 4.x before 4.1 Update 1 does not have a digital signature, which might make it easier for remote attackers to spoof the software distribution via a Trojan horse installer.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware vCenter | =4.0-update_1 | |
| VMware vCenter | =4.1 | |
| VMware vCenter | =4.0 | |
| VMware vCenter | =4.0-update_2 | |
| VMware ESXi | =4.1 | |
| VMware ESXi | =4.0 | |
| VMware ESX | =4.1 | |
| VMware ESX | =4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2011-1789?
CVE-2011-1789 has been identified as a medium severity vulnerability due to the lack of a digital signature in the installer.
How do I fix CVE-2011-1789?
To mitigate CVE-2011-1789, it is recommended to update VMware vCenter, ESXi, and ESX products to the latest versions that contain the security fixes.
What products are affected by CVE-2011-1789?
CVE-2011-1789 affects VMware vCenter versions 4.0 and 4.1 prior to their respective updates, as well as VMware ESXi and ESX versions 4.0 and 4.1 before Update 1.
What type of attack does CVE-2011-1789 allow?
CVE-2011-1789 can potentially allow remote attackers to spoof or substitute malicious installers due to the lack of digital signatures.
Which VMware products require immediate attention for CVE-2011-1789?
Administrators should prioritize addressing CVE-2011-1789 on VMware vCenter 4.0, 4.1, ESXi 4.x, and ESX 4.x installations prior to Update 1.
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/remedy
- agent/softwarecombine
- agent/severity
- agent/author
- agent/references
- agent/weakness
- agent/tags
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- vendor/vmware
- canonical/vmware vcenter
- version/vmware vcenter/4.0-update_1
- version/vmware vcenter/4.1
- version/vmware vcenter/4.0
- version/vmware vcenter/4.0-update_2
- canonical/vmware esxi
- version/vmware esxi/4.1
- version/vmware esxi/4.0
- canonical/vmware esx
- version/vmware esx/4.1
- version/vmware esx/4.0