CVE		CVE-2009-3733
Status		Candidate
Description		Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors.
Severity		Medium
CVSS score		5
CVSS vector		(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Phase		Assigned (21.08.2010)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-3733
References		BID : 36842
		BUGTRAQ : 20091027 VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues
		CONFIRM : http://www.vmware.com/security/advisories/VMSA-200...
		MLIST : [security-announce] 20091027 VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues
		OVAL : oval:org.mitre.oval:def:7822
		SECTRACK : 1023088
		SECTRACK : 1023089
		SECUNIA : 37186
		VUPEN : ADV-2009-3062
SecurityVulns:		VMWare multiple security vulnerabilities