VMware ESX/ESXi hostd-vmdb Deny Service Vulnerability

Last Update Date: 21 Oct 2013 09:59 Release Date: 21 Oct 2013 4066 Views

RISK: Medium Risk

TYPE: Operating Systems - VM Ware

A vulnerability was identified in VMware ESX/ESXi. A remote user can cause denial of service conditions.

A remote user with the ability to conduct a man-in-the-middle attack can modify management traffic to cause denial of service conditions on the hostd-vmdb service.

Impact

Denial of Service

System / Technologies affected

ESX/ESXi 4.0, 4.1
ESXi 5.0

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix.
http://www.vmware.com/security/advisories/VMSA-2013-0012.html

Vulnerability Identifier

CVE-2013-5970

Source

SecurityTracker
VMware