Test ID:	1.3.6.1.4.1.25623.1.0.900899
Category:	Denial of Service
Title:	VMware Server Multiple XSS Vulnerabilities - Linux
Summary:	VMWare Server is prone to multiple cross-site scripting (XSS); vulnerabilities.
Description:	Summary: VMWare Server is prone to multiple cross-site scripting (XSS) vulnerabilities. Vulnerability Insight: - Multiple vulnerabilities can be exploited to disclose sensitive information, conduct cross-site scripting attacks, manipulate certain data, bypass certain security restrictions, cause a DoS, or compromise a user's system. - Certain unspecified input passed to WebWorks help pages is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. Vulnerability Impact: Successful exploitation will lets attackers to cause a Denial of Service, or compromise a user's system. Affected Software/OS: VMware Server version 2.0.2 on Linux. Solution: Apply the patch from the referenced advisory. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3731 BugTraq ID: 37346 http://www.securityfocus.com/bid/37346 Bugtraq: 20091215 VMSA-2009-0017 VMware vCenter, ESX patch and vCenter Lab Manager releases address cross-site scripting issues (Google Search) http://archives.neohapsis.com/archives/bugtraq/2009-12/0229.html Bugtraq: 20100304 CA20100304-01: Security Notice for CA SiteMinder (Google Search) http://www.securityfocus.com/archive/1/509883/100/0/threaded http://lists.vmware.com/pipermail/security-announce/2009/000073.html http://www.osvdb.org/62738 http://www.osvdb.org/62739 http://www.osvdb.org/62740 http://www.osvdb.org/62741 http://www.osvdb.org/62742 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5944 http://securitytracker.com/id?1023683 http://secunia.com/advisories/38749 http://secunia.com/advisories/38842
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.