Path Traversal in Linux Linux_kernel
CVE-2009-3733
Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vec…
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.834 (99.6th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel
- Vmware Esx — versions 3.0.3, 3.5
- Vmware Esxi — versions 3.5
- Vmware Server — versions 1.0, 1.0.1, 1.0.1_build_29996
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
- cve@mitre.org (signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)
- cve@mitre.org (Patch, vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, Broken Link, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2009-3733?
- CVE-2009-3733 is a vulnerability in Linux Linux_kernel, classified under Path Traversal. Published 2009-11-02.
- Is CVE-2009-3733 known to be exploited?
- 5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.