VMware vCenter Server Unspecified Directory Traversal Vulnerability

Bugtraq ID:	47735
Class:	Input Validation Error
CVE:	CVE-2011-0426
Remote:	Yes
Local:	No
Published:	May 05 2011 12:00AM
Updated:	May 06 2011 07:52PM
Credit:	VMWare
Vulnerable:	VMWare VirtualCenter 2.5 VMWare vCenter 4.1 VMWare vCenter 4.0
Not Vulnerable:	VMWare VirtualCenter 2.5 Update 6a VMWare vCenter 4.1 Update 1 VMWare vCenter 4.0 Update 3

VMware vCenter Server Unspecified Directory Traversal Vulnerability

VMware vCenter Server is prone to an unspecified directory-traversal vulnerability because it fails to properly sanitize user-supplied input.

Remote attackers can use specially crafted requests with directory-traversal sequences ('../') to retrieve arbitrary files in the context of the application.

Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks.

NOTE (May 6, 2011): This BID was originally titled 'VMware vCenter Server and vSphere Client Multiple Security Vulnerabilities'; it has been rewritten because two of the original issues have been given their own records to better document them. See these BIDs for details:

47744 VMware vSphere Client Installer Package Digital Signature Security Weakness
47742 VMware vCenter Server SOAP Session ID Information Disclosure Vulnerability

VMware vCenter Server Unspecified Directory Traversal Vulnerability

Attackers can exploit this issue with a web browser or readily available tools.

VMware vCenter Server Unspecified Directory Traversal Vulnerability

Solution:
Updates are available. Please see the references for more information.

VMware vCenter Server Unspecified Directory Traversal Vulnerability

References:

• VMware Homepage (VMware)
  
• VMSA-2011-0008 VMware vCenter Server and vSphere Client security vulnerabilitie (VMware Security Team )
  
• VMware ESXi and ESX Denial of Service and third party updates for Likewise compo (VMware)