CVE-2005-3619

Published: Dec 31, 2005Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the management interface for VMware ESX 2.5.x before 2.5.2 upgrade patch 2, 2.1.x before 2.1.2 upgrade patch 6, and 2.0.x before 2.0.1 upgrade patch 6 allows remote attackers to inject arbitrary web script or HTML via messages that are not sanitized when viewing syslog log files.

Affected (6)

Products: Vmware: Esx

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Vmware Esx	Version 2.0.1
Vmware Esx	Version 2.0
Vmware Esx	Version 2.1.1
Vmware Esx	Version 2.1.2
Vmware Esx	Version 2.5.2
Vmware Esx	Version 2.5

References (6)

http://www.corsaire.com/advisories/c051114-002.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/archive/1/435610/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/435888/100/0/threaded

Source: cve@mitre.org

http://www.corsaire.com/advisories/c051114-002.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.securityfocus.com/archive/1/435610/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/435888/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.