Vulnerability record · CVE-2006-2481 · published 31 July 2006

CVE-2006-2481: Vmware esx vulnerability

Vmware · Esx

VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and vmware.mui.sid cookies, which allows attackers to gain privileges by obtaining the cookies using attacks such as cross-site scripting (CVE-2005-3619).

5.0 CVSS 2.0 Medium EPSS 7.2% · top 5.9% CWE-255 · CWE-255

5.0CVSS 2.0 base score

7.2%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

14References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Esx Vmware

References

Link	Tags
http://kb.vmware.com/kb/2118366
http://secunia.com/advisories/21230	Vendor Advisory
http://www.corsaire.com/advisories/c060512-001.txt	Vendor Advisory
http://www.securityfocus.com/archive/1/441728/100/100/threaded
http://www.securityfocus.com/archive/1/441825/100/100/threaded
http://www.securityfocus.com/bid/19249
http://www.vupen.com/english/advisories/2006/3075	Vendor Advisory
http://kb.vmware.com/kb/2118366
http://secunia.com/advisories/21230	Vendor Advisory
http://www.corsaire.com/advisories/c060512-001.txt	Vendor Advisory
http://www.securityfocus.com/archive/1/441728/100/100/threaded
http://www.securityfocus.com/archive/1/441825/100/100/threaded
http://www.securityfocus.com/bid/19249
http://www.vupen.com/english/advisories/2006/3075	Vendor Advisory

Track CVE-2006-2481 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2014-7169GNU Bash environment variable function parsing command injection (Shellshock variant)GNU Bash through 4.3 bash43-025 processes trailing strings after malformed function definitions in environment variable values, allowing command inje…KEVEPSS 100%analysed25 Sep 2014 9.8CVE-2014-6271GNU Bash environment variable command injection (ShellShock)GNU Bash through 4.3 processes trailing strings after function definitions in environment variable values, allowing injected commands to run when Bas…KEVEPSS 100%analysed24 Sep 2014 10.0CVE-2013-1405Vmware vcenter server improper authentication vulnerabilityVMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 bef…EPSS 2.8%15 Feb 2013 10.0CVE-2007-0061Vmware ace memory buffer overflow vulnerabilityThe DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 bef…EPSS 6.5%21 Sep 2007 10.0CVE-2007-0063Vmware ace vulnerabilityInteger underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 5…EPSS 20%21 Sep 2007 9.9CVE-2012-1516Vmware esx memory buffer overflow vulnerabilityThe VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a …EPSS 3.2%4 May 2012 9.4CVE-2013-3658Vmware esx path traversal vulnerabilityDirectory traversal vulnerability in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to delete arbitrary host OS files via …EPSS 3.7%10 Sep 2013 9.3CVE-2012-3288Vmware workstation improper input validation vulnerabilityVMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware…EPSS 3.8%14 Jun 2012

Source: NIST National Vulnerability Database (record CVE-2006-2481), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.