{"api_version":"1","generated_at":"2026-07-23T08:17:46+00:00","cve":"CVE-2010-2667","urls":{"html":"https://cve.report/CVE-2010-2667","api":"https://cve.report/api/cve/CVE-2010-2667.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-2667","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-2667"},"summary":{"title":"CVE-2010-2667","description":"Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 allow remote authenticated users to execute arbitrary commands via vectors involving (1) the Studio virtual appliance or (2) a virtual appliance created by the Studio virtual appliance.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-07-22 05:43:53","updated_at":"2026-04-29 01:13:23"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6","severity":"","vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","baseScore":6,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/archive/1/512311/100/0/threaded","name":"http://www.securityfocus.com/archive/1/512311/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2010/1791","name":"http://www.vupen.com/english/advisories/2010/1791","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1024187","name":"http://securitytracker.com/id?1024187","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - VMware Studio Bugs Let Remote Authenticated Users Execute Arbitrary Commands and Local Users Gain Elevated Privileges","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.wmware.com/security/advisories/VMSA-2010-0011.html","name":"http://www.wmware.com/security/advisories/VMSA-2010-0011.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"VMSA-2010-0011 | United States","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000101.html","name":"http://lists.vmware.com/pipermail/security-announce/2010/000101.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"[Security-announce] VMSA-2010-0011 VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/40507","name":"http://secunia.com/advisories/40507","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"VMware Studio Privilege Escalation and Command Execution - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/60350","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/60350","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/41566","name":"http://www.securityfocus.com/bid/41566","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"VMware Studio Remote Arbitrary Command Execution Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2667","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2667","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"2667","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"studio","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T02:39:37.893Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"studio-vami-command-execution(60350)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/60350"},{"name":"20100713 VMSA-2010-0011 VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0.","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/512311/100/0/threaded"},{"name":"1024187","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1024187"},{"name":"40507","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/40507"},{"name":"41566","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/41566"},{"name":"ADV-2010-1791","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/1791"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.wmware.com/security/advisories/VMSA-2010-0011.html"},{"name":"[security-announce] 20100712 VMSA-2010-0011 VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://lists.vmware.com/pipermail/security-announce/2010/000101.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-07-12T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 allow remote authenticated users to execute arbitrary commands via vectors involving (1) the Studio virtual appliance or (2) a virtual appliance created by the Studio virtual appliance."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-10T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"studio-vami-command-execution(60350)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/60350"},{"name":"20100713 VMSA-2010-0011 VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0.","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/512311/100/0/threaded"},{"name":"1024187","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1024187"},{"name":"40507","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/40507"},{"name":"41566","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/41566"},{"name":"ADV-2010-1791","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/1791"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.wmware.com/security/advisories/VMSA-2010-0011.html"},{"name":"[security-announce] 20100712 VMSA-2010-0011 VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0","tags":["mailing-list","x_refsource_MLIST"],"url":"http://lists.vmware.com/pipermail/security-announce/2010/000101.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-2667","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 allow remote authenticated users to execute arbitrary commands via vectors involving (1) the Studio virtual appliance or (2) a virtual appliance created by the Studio virtual appliance."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"studio-vami-command-execution(60350)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/60350"},{"name":"20100713 VMSA-2010-0011 VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0.","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/512311/100/0/threaded"},{"name":"1024187","refsource":"SECTRACK","url":"http://securitytracker.com/id?1024187"},{"name":"40507","refsource":"SECUNIA","url":"http://secunia.com/advisories/40507"},{"name":"41566","refsource":"BID","url":"http://www.securityfocus.com/bid/41566"},{"name":"ADV-2010-1791","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/1791"},{"name":"http://www.wmware.com/security/advisories/VMSA-2010-0011.html","refsource":"CONFIRM","url":"http://www.wmware.com/security/advisories/VMSA-2010-0011.html"},{"name":"[security-announce] 20100712 VMSA-2010-0011 VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0","refsource":"MLIST","url":"http://lists.vmware.com/pipermail/security-announce/2010/000101.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-2667","datePublished":"2010-07-22T01:00:00.000Z","dateReserved":"2010-07-07T00:00:00.000Z","dateUpdated":"2024-08-07T02:39:37.893Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-07-22 05:43:53","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","baseScore":6,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:studio:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0DA971BE-90C8-4181-840E-0A5DDE9692CE"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"2667","Ordinal":"1","Title":"CVE-2010-2667","CVE":"CVE-2010-2667","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"2667","Ordinal":"1","NoteData":"Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 allow remote authenticated users to execute arbitrary commands via vectors involving (1) the Studio virtual appliance or (2) a virtual appliance created by the Studio virtual appliance.","Type":"Description","Title":"CVE-2010-2667"},{"CveYear":"2010","CveId":"2667","Ordinal":"2","NoteData":"2010-07-21","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"2667","Ordinal":"3","NoteData":"2018-10-10","Type":"Other","Title":"Modified"}]}}}