CVE-2013-1661
VMware ESX 4.0-4.1 and ESXi 4.0-5.1 - Denial of Service via NFC Protocol Manipulation
Title source: llmDescription
VMware ESXi 4.0 through 5.1, and ESX 4.0 and 4.1, does not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to cause a denial of service (unhandled exception and application crash) by modifying the client-server data stream.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www.vmware.com/security/advisories/VMSA-2013-0011.html
Scores
EPSS
0.0036
EPSS Percentile
58.6%
Details
CWE
CWE-20
Status
published
Products (6)
vmware/esx
4.0
vmware/esx
4.1
vmware/esxi
4.0 (5 CPE variants)
vmware/esxi
4.1 (3 CPE variants)
vmware/esxi
5.0 (3 CPE variants)
vmware/esxi
5.1
Published
Sep 04, 2013
Tracked Since
Feb 18, 2026