Vulnerabilities > Vmware > Esxi > 4.1

DATE CVE VULNERABILITY TITLE RISK
2023-04-25 CVE-2023-29552 The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. 7.5
2022-10-07 CVE-2022-31681 NULL Pointer Dereference vulnerability in VMWare Esxi
VMware ESXi contains a null-pointer deference vulnerability.
local
low complexity
vmware CWE-476
6.5
2014-01-17 CVE-2014-1208 Local Denial Of Service vulnerability in Multiple VMWare Products
VMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0.1, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 allow guest OS users to cause a denial of service (VMX process disruption) by using an invalid port.
low complexity
vmware
3.3
2014-01-17 CVE-2014-1207 Denial of Service vulnerability in VMWare ESX and Esxi
VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (NULL pointer dereference) by intercepting and modifying Network File Copy (NFC) traffic.
network
vmware
4.3
2013-12-23 CVE-2013-5973 Permissions, Privileges, and Access Controls vulnerability in VMWare ESX and Esxi
VMware ESXi 4.0 through 5.5 and ESX 4.0 and 4.1 allow local users to read or modify arbitrary files by leveraging the Virtual Machine Power User or Resource Pool Administrator role for a vCenter Server Add Existing Disk action with a (1) -flat, (2) -rdm, or (3) -rdmp filename.
local
vmware CWE-264
4.4
2013-12-04 CVE-2013-3519 Permissions, Privileges, and Access Controls vulnerability in VMWare products
lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows guest OS is used, allows guest OS users to gain guest OS privileges via an application that performs a crafted memory allocation.
7.9
2013-10-21 CVE-2013-5970 Improper Input Validation vulnerability in VMWare ESX and Esxi
hostd-vmdb in VMware ESXi 4.0 through 5.0 and ESX 4.0 through 4.1 allows remote attackers to cause a denial of service (hostd-vmdb service outage) by modifying management traffic.
network
vmware CWE-20
7.1
2013-09-10 CVE-2013-3658 Path Traversal vulnerability in VMWare ESX and Esxi
Directory traversal vulnerability in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to delete arbitrary host OS files via unspecified vectors.
network
low complexity
vmware CWE-22
critical
9.4
2013-09-10 CVE-2013-3657 Buffer Errors vulnerability in VMWare ESX and Esxi
Buffer overflow in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.
network
low complexity
vmware CWE-119
7.5
2013-09-04 CVE-2013-1661 Improper Input Validation vulnerability in VMWare ESX and Esxi
VMware ESXi 4.0 through 5.1, and ESX 4.0 and 4.1, does not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to cause a denial of service (unhandled exception and application crash) by modifying the client-server data stream.
network
vmware CWE-20
4.3