CVE-2009-3733

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 83.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-11-02 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors.

Affected products

VMware ESX: 3.0.3, 3.5
VMware ESXi: 3.5
VMware Server: 1.0, 1.0.1, 1.0.1_build_29996, 1.0.2, 1.0.3, 1.0.4 (+8)

References

http://lists.vmware.com/pipermail/security-announce/2009/000069.html
http://secunia.com/advisories/37186
http://security.gentoo.org/glsa/glsa-201209-25.xml
http://securitytracker.com/id?1023088
http://securitytracker.com/id?1023089
http://www.securityfocus.com/archive/1/507523/100/0/threaded
http://www.securityfocus.com/bid/36842
http://www.vmware.com/security/advisories/VMSA-2009-0015.html
http://www.vupen.com/english/advisories/2009/3062
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7822
http://lists.vmware.com/pipermail/security-announce/2009/000069.html
http://secunia.com/advisories/37186

Get alerted when CVE-2009-3733 or the next vulnerability affects your stack