Tracker / CVE-2006-3589
CVE-2006-3589
Low 3.6
vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key.
Affected products and versions
| vmware | esx |
|---|---|
| vmware | infrastructure |
| vmware | player |
| vmware | server |
| vmware | workstation |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.