CVE-2006-3589

Publication date

2006-07-19 23:00:00

Family

mitre

State

PUBLISHED

Description

vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key.