What is the severity of CVE-2011-4404?

CVE-2011-4404 is considered a medium severity vulnerability due to its potential for directory traversal attacks allowing unauthorized file access.

How do I fix CVE-2011-4404?

To fix CVE-2011-4404, you should update VMware vCenter Update Manager to at least version 4.1 Update 2 or 4.0 Update 4.

What types of software are affected by CVE-2011-4404?

CVE-2011-4404 affects VMware vCenter Update Manager versions 4.0 Update 1, 4.0 Update 2, 4.0 Update 3, and 4.1.

What exploitation methods are associated with CVE-2011-4404?

CVE-2011-4404 can be exploited through directory traversal techniques to read arbitrary files from the server.

Is there any workaround for CVE-2011-4404 if updates cannot be applied?

While updating is the recommended fix for CVE-2011-4404, restricting access to the HTTP server can mitigate the risk.

Vulnerability/
CVE-2011-4404

medium

CWE

19/11/2011

7/8/2024

CVE-2011-4404

First published: Sat Nov 19 2011(Updated: )

The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to CVE-2009-1523.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
VMware vCenter Update Manager	=4.1-update_1
VMware vCenter Update Manager	=4.0-update_2
VMware vCenter Update Manager	=4.1
VMware vCenter Update Manager	=4.0-update_1
VMware vCenter Update Manager	=4.0-update_3
VMware vCenter Update Manager	=4.0

Remedy

http://www.vmware.com/security/advisories/VMSA-2011-0014.html

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2011-4404?
CVE-2011-4404 is considered a medium severity vulnerability due to its potential for directory traversal attacks allowing unauthorized file access.
How do I fix CVE-2011-4404?
To fix CVE-2011-4404, you should update VMware vCenter Update Manager to at least version 4.1 Update 2 or 4.0 Update 4.
What types of software are affected by CVE-2011-4404?
CVE-2011-4404 affects VMware vCenter Update Manager versions 4.0 Update 1, 4.0 Update 2, 4.0 Update 3, and 4.1.
What exploitation methods are associated with CVE-2011-4404?
CVE-2011-4404 can be exploited through directory traversal techniques to read arbitrary files from the server.
Is there any workaround for CVE-2011-4404 if updates cannot be applied?
While updating is the recommended fix for CVE-2011-4404, restricting access to the HTTP server can mitigate the risk.

collector/nvd-historical
collector/nvd-index
agent/references
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/author
agent/remedy
agent/weakness
agent/last-modified-date
agent/tags
agent/description
agent/first-publish-date
agent/event
agent/source
vendor/vmware
canonical/vmware vcenter update manager
version/vmware vcenter update manager/4.1-update_1
version/vmware vcenter update manager/4.0-update_2
version/vmware vcenter update manager/4.1
version/vmware vcenter update manager/4.0-update_1
version/vmware vcenter update manager/4.0-update_3
version/vmware vcenter update manager/4.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2011-4404?
CVE-2011-4404 is considered a medium severity vulnerability due to its potential for directory traversal attacks allowing unauthorized file access.
How do I fix CVE-2011-4404?
To fix CVE-2011-4404, you should update VMware vCenter Update Manager to at least version 4.1 Update 2 or 4.0 Update 4.
What types of software are affected by CVE-2011-4404?
CVE-2011-4404 affects VMware vCenter Update Manager versions 4.0 Update 1, 4.0 Update 2, 4.0 Update 3, and 4.1.
What exploitation methods are associated with CVE-2011-4404?
CVE-2011-4404 can be exploited through directory traversal techniques to read arbitrary files from the server.
Is there any workaround for CVE-2011-4404 if updates cannot be applied?
While updating is the recommended fix for CVE-2011-4404, restricting access to the HTTP server can mitigate the risk.