Read the docs
TI-2006-03481 Aliases CVE-2006-3589GHSA-h2qv-j7rw-m85p

vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check…

Priority LOW 18Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key.

Why it matters now

EPSS 0.00427 37th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 11

CPEVersionsRoleVendor
cpe:2.3:a:vmware:infrastructure:3:*:*:*:*:*:*:*3VulnerableVMware
cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*all versionsVulnerableVMware
cpe:2.3:a:vmware:server:1.0.1_build_29996:*:*:*:*:*:*:*1.0.1_build_29996VulnerableVMware
cpe:2.3:a:vmware:workstation:5.5.3:*:*:*:*:*:*:*5.5.3VulnerableVMware
cpe:2.3:o:vmware:esx:2.0:*:*:*:*:*:*:*2.0VulnerableVMware
cpe:2.3:o:vmware:esx:2.0.1:*:*:*:*:*:*:*2.0.1VulnerableVMware
cpe:2.3:o:vmware:esx:2.1:*:*:*:*:*:*:*2.1VulnerableVMware
cpe:2.3:o:vmware:esx:2.1.1:*:*:*:*:*:*:*2.1.1VulnerableVMware
cpe:2.3:o:vmware:esx:2.1.2:*:*:*:*:*:*:*2.1.2VulnerableVMware
cpe:2.3:o:vmware:esx:2.5:*:*:*:*:*:*:*2.5VulnerableVMware
  • cpe:2.3:a:vmware:infrastructure:3:*:*:*:*:*:*:* Versions 3 Vulnerable ·VMware
  • cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·VMware
  • cpe:2.3:a:vmware:server:1.0.1_build_29996:*:*:*:*:*:*:* Versions 1.0.1_build_29996 Vulnerable ·VMware
  • cpe:2.3:a:vmware:workstation:5.5.3:*:*:*:*:*:*:* Versions 5.5.3 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esx:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esx:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esx:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esx:2.1.1:*:*:*:*:*:*:* Versions 2.1.1 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esx:2.1.2:*:*:*:*:*:*:* Versions 2.1.2 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esx:2.5:*:*:*:*:*:*:* Versions 2.5 Vulnerable ·VMware
Show 1 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:vmware:esx:2.5.2:*:*:*:*:*:*:*2.5.2VulnerableVMware
  • cpe:2.3:o:vmware:esx:2.5.2:*:*:*:*:*:*:* Versions 2.5.2 Vulnerable ·VMware

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-3589
  2. 2026-10-03 Alias added: GHSA-h2qv-j7rw-m85p

References

Other 7

  • TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
  • TI-2009-03557 Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x… CVSS 2.0MEDIUM 5.0
  • TI-2007-00059 Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455… CVSS 2.0HIGH 10.0
  • TI-2010-02816 The xfs implementation in the Linux kernel before 2.6.35 does not look up inode… CVSS 3.1HIGH 8.1
  • TI-2007-00057 The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1… CVSS 2.0HIGH 10.0
See all 85 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences