CVE-2009-3733: vmware esx Path Traversal

CVSS: 5.0v2.0MediumModified

Published 02-11-2009Last modified 07-08-2024

Vulnerability summary

CVE-2009-3733 is a medium (CVSS 5.0) Path Traversal vulnerability in vmware esx. EPSS estimates a 83.38% chance of exploitation in the next 30 days, higher than 99.6% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

47/100

0100

Medium · default modelHow is this calculated?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

83.38%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2exploit-database, metasploit

Timeline

02-11-2009
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

83.38%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 83.38% on 18-09-2026

18-09-202618-10-2026

EPSS score

83.38%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

exploit-databaseremotemultipleVerified
VMware Server 2.0.1 / ESXi Server 3.5 - Directory Traversal
Maturity: weaponized
MetasploitremoteUnverified
VMware Server Directory Traversal Vulnerability
auxiliary/scanner/vmware/vmware_server_dir_trav
Maturity: poc

Weaknesses

CWE · root cause

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Affected systems

Vmware3 products

esx3.0.3 | 3.5
esxi3.5
server1.0 | 1.0.1 | 1.0.1_build_29996 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.4_build_56528 | 1.0.5 | 1.0.6 | 1.0.7 | 1.0.8 | 1.0.9 | 2.0.0 | 2.0.1

1 vendor · 3 products

References

10 links

security.gentoo.org/glsa/glsa-201209-25.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7822VDB EntrySignatureX Refsource OVALThird Party Advisory
www.vupen.com/english/advisories/2009/3062VDB EntryX Refsource VUPENPatchVendor Advisory
securitytracker.com/id?1023089VDB EntryX Refsource SECTRACKThird Party Advisory
lists.vmware.com/pipermail/security-announce/2009/000069.htmlMailing ListX Refsource MLISTPatchVendor Advisory
www.securityfocus.com/bid/36842VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/37186Third Party AdvisoryX Refsource SECUNIABroken Link
www.securityfocus.com/archive/1/507523/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
securitytracker.com/id?1023088VDB EntryX Refsource SECTRACKThird Party Advisory
www.vmware.com/security/advisories/VMSA-2009-0015.htmlX Refsource CONFIRMPatchVendor Advisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities