CVE-2014-3790

Ruby vSphere Console (RVC) in VMware vCenter Server Appliance allows remote authenticated users to execute arbitrary commands as root by escaping from a chroot jail.

Score

CVSS 2.0 9.0 Critical

Status

Modified - cve@mitre.org

Published

2014-06-01

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Vcenter Server Appliance (Vmware)

References

• http://secunia.com/advisories/58823
• http://www.securityfocus.com/bid/67756
• http://www.securitytracker.com/id/1030436
• http://zerodayinitiative.com/advisories/ZDI-14-159/