« Volver al listado

CVE-2013-5973

Estado: ModificadaMedia (4.4)—

VMware ESXi 4.0 through 5.5 and ESX 4.0 and 4.1 allow local users to read or modify arbitrary files by leveraging the Virtual Machine Power User or Resource Pool Administrator role for a vCenter Server Add Existing Disk action with a (1) -flat, (2) -rdm, or (3) -rdmp filename.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Vmware — ESXVmware — Esxi

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-5973",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.4,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-12-23T15:42:30.137",
  "references": [
    {
      "url": "http://jvn.jp/en/jp/JVN13154935/index.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000123.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/101387",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/530482/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/64491",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id/1029529",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vmware.com/security/advisories/VMSA-2013-0016.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89938",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://jvn.jp/en/jp/JVN13154935/index.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000123.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/101387",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/530482/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/64491",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1029529",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vmware.com/security/advisories/VMSA-2013-0016.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89938",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "VMware ESXi 4.0 through 5.5 and ESX 4.0 and 4.1 allow local users to read or modify arbitrary files by leveraging the Virtual Machine Power User or Resource Pool Administrator role for a vCenter Server Add Existing Disk action with a (1) -flat, (2) -rdm, or (3) -rdmp filename."
    },
    {
      "lang": "es",
      "value": "VMware ESXi 4.0 a 5.5 y ESX 4.0 y 4.1 permiten a usuarios locales leer o modificar ficheros arbitrarios mediante el aprovechamiento de los roles Virtual Machine Power User o Resource Pool Administrator para una acción Add Existing Disk en vCenter con nombres de fichero (1) -flat, (2) -rdm o (3) -rdmp."
    }
  ],
  "lastModified": "2026-06-16T23:59:49.713",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BC337BB7-9A45-4406-A783-851F279130EE"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esx:4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B6BA46F-4E8C-4B2A-AE92-81B9F1B4D56C"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:vmware:esxi:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "13771B15-CD71-472A-BE56-718B87D5825D"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:4.0:1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0A4E41C0-31FA-47AA-A9BF-B9A6C1D44801"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:4.0:2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF016EE7-083A-4D62-A6D4-2807EB47B6DB"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:4.0:3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8F11844A-3C6C-4AA5-87DC-979AFF62867A"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:4.0:4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC463653-A599-45CF-8EA9-8854D5C59963"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4BDE707D-A1F4-4829-843E-F6633BB84D6D"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:4.1:1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4DC5C2BF-6EC6-436F-A925-469E87249C8A"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:4.1:2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7BCE5DA9-BB88-4169-B77C-40B1F98D511A"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E2331236-2E9B-4B52-81EE-B52DEB41ACE5"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:5.0:1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C5A1C2B-119E-49F3-B8E6-0610EE1C445C"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:5.0:2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF29B5A4-6E4C-4EAE-BC6A-0DD44262EE35"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7217CBE1-3882-4045-A15C-EE7D4174CA00"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:5.1:1:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9A405802-D786-46F9-9E29-C727F9FD480A"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:5.5:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "469D98A5-7B8B-41BE-94C6-D6EF25388007"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}