Back to Database
Status published
Medium
CVE-2006-2481
VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2...
Vulnerability Description
VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and vmware.mui.sid cookies, which allows attackers to gain privileges by obtaining the cookies using attacks such as cross-site scripting (CVE-2005-3619).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-2481
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/archive/1/441728/100/100/threaded
- http://www.corsaire.com/advisories/c060512-001.txt
- http://www.securityfocus.com/bid/19249
- http://kb.vmware.com/kb/2118366
- http://www.securityfocus.com/archive/1/441825/100/100/threaded
- http://www.vupen.com/english/advisories/2006/3075
- http://secunia.com/advisories/21230
More from vmware
View All →CVE-2025-41251
Weak password recovery vulnerability
High
8.1
CVE-2022-38652
A remote insecure deserialization vulnerability exixsts in VMWare Hyperic Agent...
Critical
9.9
CVE-2022-38651
A security filter misconfiguration exists in VMware Hyperic Server 5.8.6....
Unknown
0
CVE-2022-38650
A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic...
Critical
10
CVE-2022-31693
VMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and...
Unknown
0
Affected Vendor
vmware
View all reports →Affected Software
esx
Vulnerable Versions:
2.0, 2.0.1, 2.1, 2.1.1, 2.1.2, 2.5, 2.5.2
Timeline
Official Publish:
July 31st, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.