CVE-2013-1659: High severity vmware vcenter vulnerability
VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 do not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption) by modifying the client-server data stream.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1659?
CVE-2013-1659 is rated as critical due to its potential for remote code execution and denial of service.
How do I fix CVE-2013-1659?
To fix CVE-2013-1659, you should update VMware vCenter Server and ESXi to the latest versions or apply the necessary patches as recommended by VMware.
Which versions are affected by CVE-2013-1659?
CVE-2013-1659 affects VMware vCenter Server versions prior to 4.0 Update 4b, 5.0 prior to Update 2, 5.1 prior to 5.1.0b, and various versions of VMware ESXi and ESX.
What can an attacker do with CVE-2013-1659?
An attacker exploiting CVE-2013-1659 can execute arbitrary code on the affected systems or cause a denial of service.
Is there a workaround for CVE-2013-1659?
No official workaround is recommended for CVE-2013-1659; patching is the principal mitigation method.