CVE:CVE-2009-3733
CNNVD:CNNVD-200911-013
VMWare是一款“虚拟PC”软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。
VMware Server 1.0.10 build 203137版本之前的1.x版本以及Linux上2.0.2 build 203138版本之前的2.x版本, VMware ESXi 3.5版本,以及VMware ESX 3.0.3版本和3.5版本中存在目录遍历漏洞。远程攻击者可以借助未名参数读取任意文件。
solution:Upgrade vmware esx to a higher version than 3.0.3,3.5,and avoid the version 3.0.3,3.5; Upgrade vmware esxi to a higher version than 3.5,and avoid the version 3.5; Upgrade vmware server to a higher version than 1.0,1.0.1,1.0.1_build_29996,1.0.2,1.0.3,1.0.4,1.0.4_build_56528,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,2.0.0,2.0.1,and avoid the version 1.0,1.0.1,1.0.1_build_29996,1.0.2,1.0.3,1.0.4,1.0.4_build_56528,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,2.0.0,2.0.1