CVE-2008-2101

Published: Sep 3, 2008Modified: Apr 23, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The VMware Consolidated Backup (VCB) command-line utilities in VMware ESX 3.0.1 through 3.0.3 and ESX 3.5 place a password on the command line, which allows local users to obtain sensitive information by listing the process.

Affected (4)

Products: Vmware: Esx

Vmware

1 product

Esx

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Vmware Esx	Version 3.0.1
Vmware Esx	Version 3.0.2
Vmware Esx	Version 3.0.3
Vmware Esx	Version 3.5

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (20)

http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html

Source: cve@mitre.org

http://secunia.com/advisories/31713

Source: cve@mitre.org

Vendor Advisory

http://security.gentoo.org/glsa/glsa-201209-25.xml

Source: cve@mitre.org

http://securityreason.com/securityalert/4202

Source: cve@mitre.org

http://securitytracker.com/id?1020794

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/495869/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/30937

Source: cve@mitre.org

http://www.vmware.com/security/advisories/VMSA-2008-0014.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2466

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/44797

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html