NetSight
IP …
low3.6

CVE-2006-3589

vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an…

Impact

vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key.

Affected products

VendorProductAffected versions
VmwareInfrastructure
Version 3
VmwarePlayer
All versions
VmwareServer
Version 1.0.1_build_29996
VmwareWorkstation
Version 5.5.3
VmwareEsx
Versions 2.0, 2.0.1, 2.1, 2.1.1, 2.1.2, 2.5

References