CVE-2013-3658: Path Traversal
Published Sep 10, 2013
·Updated
Directory traversal vulnerability in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to delete arbitrary host OS files via unspecified vectors.
Affected Software
11 affected components
VMware ESX=4.0
VMware ESX=4.1
VMware ESXi=4.0
VMware ESXi=4.0-1
VMware ESXi=4.0-2
VMware ESXi=4.0-3
VMware ESXi=4.0-4
VMware ESXi=4.1
VMware ESXi=4.1-1
VMware ESXi=4.1-2
VMware ESXi=5.0
Event History
Sep 10, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3658?
CVE-2013-3658 is classified as a critical vulnerability due to the potential for remote attackers to delete arbitrary host OS files.
2
How do I fix CVE-2013-3658?
To mitigate CVE-2013-3658, upgrade to the latest patched version of VMware ESXi or ESX that addresses this vulnerability.
3
Which versions are affected by CVE-2013-3658?
CVE-2013-3658 affects VMware ESXi versions 4.0 through 5.0 and VMware ESX versions 4.0 and 4.1.
4
What types of attacks are possible with CVE-2013-3658?
Exploitation of CVE-2013-3658 could allow attackers to perform unauthorized file deletions on the host operating system.
5
Is there a workaround for CVE-2013-3658?
There are no specific workarounds for CVE-2013-3658; the recommended action is to update to a secure version.