Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2006-3589

vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key.

  • Published: Jul 21, 2006
  • Updated: Nov 9, 2025
  • CVE: CVE-2006-3589
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 3.6
  • AV:L/AC:L/Au:N/C:P/I:P/A:N

No CWE or OWASP classifications available.

Software From Fixed in
vmware / server 1.0.1_build_29996 1.0.1_build_29996.x
vmware / workstation 5.5.3 5.5.3.x
vmware / infrastructure 3 3.x
vmware / player - -
vmware / esx 2.0 2.0.x
vmware / esx 2.0.1 2.0.1.x
vmware / esx 2.1.2 2.1.2.x
vmware / esx 2.5 2.5.x
vmware / esx 2.5.2 2.5.2.x
vmware / esx 2.1.1 2.1.1.x
vmware / esx 2.1 2.1.x