CVE-2006-5990

VMWare VirtualCenter client 2.x before 2.0.1 Patch 1 (Build 33643) and 1.4.x before 1.4.1 Patch 1 (Build 33425), when server certificate verification is enabled, does not verify the server's X.509 certificate when creating an SSL session, which allows remote malicious servers to spoof valid servers via a man-in-the-middle attack.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:vmware:virtualcenter:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:virtualcenter:2.0.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2006-11-21 01:07

Updated : 2024-02-28 11:01


NVD link : CVE-2006-5990

Mitre link : CVE-2006-5990

CVE.ORG link : CVE-2006-5990


JSON object : View

Products Affected

vmware

  • virtualcenter
CWE
CWE-20

Improper Input Validation