CVE-2009-3733
EXPLOITEDVMware ESX 3.0.3 and 3.5 and ESXi 3.5 - Path Traversal
Title source: llmExploitation Summary
CVE-2009-3733 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 2 public exploits from researchers including Justin Morehouse, including a Metasploit module auxiliary/scanner/vmware/vmware_server_dir_trav.
AI-analyzed exploit summary This Nmap NSE script checks for a directory traversal vulnerability in VMware ESX, ESXi, and Server (CVE-2009-3733) by attempting to access sensitive files via path traversal techniques. It retrieves and parses the vmInventory.xml file to enumerate VM configurations.
Description
Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors.
Exploits (2)
This Nmap NSE script checks for a directory traversal vulnerability in VMware ESX, ESXi, and Server (CVE-2009-3733) by attempting to access sensitive files via path traversal techniques. It retrieves and parses the vmInventory.xml file to enumerate VM configurations.
This Metasploit module exploits a directory traversal vulnerability in VMware Server 1.x/2.x and ESXi/ESX 3.x, allowing remote attackers to read arbitrary files via crafted HTTP requests. It targets ports 8222/8333 and uses URL-encoded traversal sequences to access sensitive files like vmInventory.xml.