CVE-2006-3589
- State
- Published
- Severity
- Not scored
- Published
- Jul 19, 2006
- Updated
- Aug 7, 2024
- Reserved
- Jul 13, 2006
Description
vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html
- 19060vdb-entry
- 23680third-party-advisory
- 21120third-party-advisory
- 1016536vdb-entry
- http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html
- http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html
- 20060718 VMSA-2006-0003 VMware possible incorrect permissions on SSL key filesmailing-list
- ADV-2006-2880vdb-entry
- 19062vdb-entry
- 20070110 VMware ESX server security updatesmailing-list
- 27418vdb-entry
- vmware-vmwareconfig-file-permissions(27881)vdb-entry
- http://kb.vmware.com/kb/2467205
- 20060725 Advisory: VMware Possible Incorrect Permissions On SSL Key Filesmailing-list
- http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.