Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-sz64-mgub-abf2
Summary
Multiple vulnerabilities have been found in VMware Player, Server,
    and Workstation, allowing remote and local attackers to conduct several
    attacks, including privilege escalation, remote execution of arbitrary
    code, and a Denial of Service.
Aliases
0
alias CVE-2009-3733
Fixed_packages
Affected_packages
0
url pkg:ebuild/app-emulation/vmware-player@2.5.5.328052
purl pkg:ebuild/app-emulation/vmware-player@2.5.5.328052
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2a5v-kuuc-7uaa
1
vulnerability VCID-2kj7-a6r9-bfft
2
vulnerability VCID-2nvs-t3tu-6qb5
3
vulnerability VCID-2yer-rsfy-h3c2
4
vulnerability VCID-63ya-au98-hkes
5
vulnerability VCID-7yq2-17us-5kdd
6
vulnerability VCID-8fbf-8fea-27d9
7
vulnerability VCID-9enb-qxzr-zka6
8
vulnerability VCID-a1zy-wpsh-ybdq
9
vulnerability VCID-b7yt-1bj3-13bp
10
vulnerability VCID-bz18-eys5-rua3
11
vulnerability VCID-d1tn-aydm-7ucp
12
vulnerability VCID-dc32-wm2e-h7fj
13
vulnerability VCID-e5gp-hpdc-nydk
14
vulnerability VCID-eyg9-ezua-1kfz
15
vulnerability VCID-gdac-gvg7-m3e9
16
vulnerability VCID-ke4g-w7md-pkh6
17
vulnerability VCID-kxd4-h9ev-1yby
18
vulnerability VCID-njd2-w4zv-h3er
19
vulnerability VCID-pw1x-gvns-bbcx
20
vulnerability VCID-q5ts-6ax2-bqgb
21
vulnerability VCID-r2aq-6u1w-dubh
22
vulnerability VCID-r4en-2px9-pkcw
23
vulnerability VCID-r55y-rbsq-pkb9
24
vulnerability VCID-rcck-xn4c-k3at
25
vulnerability VCID-rpue-d1na-gkaa
26
vulnerability VCID-rzpn-qmzx-w3gt
27
vulnerability VCID-sz64-mgub-abf2
28
vulnerability VCID-tawd-pjmt-ukag
29
vulnerability VCID-txkg-jsdf-93e6
30
vulnerability VCID-uw16-r5d8-nfbu
31
vulnerability VCID-wknw-5jfy-c3dh
32
vulnerability VCID-x226-fmea-gqhh
33
vulnerability VCID-xscf-xy4a-huce
34
vulnerability VCID-xwej-smtp-sfef
35
vulnerability VCID-y97g-phmz-rubu
36
vulnerability VCID-z8f9-7v4h-5kfw
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-emulation/vmware-player@2.5.5.328052
1
url pkg:ebuild/app-emulation/vmware-server@1.0.9.156507
purl pkg:ebuild/app-emulation/vmware-server@1.0.9.156507
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2a5v-kuuc-7uaa
1
vulnerability VCID-2kj7-a6r9-bfft
2
vulnerability VCID-2nvs-t3tu-6qb5
3
vulnerability VCID-2yer-rsfy-h3c2
4
vulnerability VCID-63ya-au98-hkes
5
vulnerability VCID-7yq2-17us-5kdd
6
vulnerability VCID-8fbf-8fea-27d9
7
vulnerability VCID-9enb-qxzr-zka6
8
vulnerability VCID-a1zy-wpsh-ybdq
9
vulnerability VCID-b7yt-1bj3-13bp
10
vulnerability VCID-bz18-eys5-rua3
11
vulnerability VCID-d1tn-aydm-7ucp
12
vulnerability VCID-dc32-wm2e-h7fj
13
vulnerability VCID-e5gp-hpdc-nydk
14
vulnerability VCID-eyg9-ezua-1kfz
15
vulnerability VCID-gdac-gvg7-m3e9
16
vulnerability VCID-ke4g-w7md-pkh6
17
vulnerability VCID-kxd4-h9ev-1yby
18
vulnerability VCID-njd2-w4zv-h3er
19
vulnerability VCID-pw1x-gvns-bbcx
20
vulnerability VCID-q5ts-6ax2-bqgb
21
vulnerability VCID-r2aq-6u1w-dubh
22
vulnerability VCID-r4en-2px9-pkcw
23
vulnerability VCID-r55y-rbsq-pkb9
24
vulnerability VCID-rcck-xn4c-k3at
25
vulnerability VCID-rpue-d1na-gkaa
26
vulnerability VCID-rzpn-qmzx-w3gt
27
vulnerability VCID-sz64-mgub-abf2
28
vulnerability VCID-tawd-pjmt-ukag
29
vulnerability VCID-txkg-jsdf-93e6
30
vulnerability VCID-uw16-r5d8-nfbu
31
vulnerability VCID-wknw-5jfy-c3dh
32
vulnerability VCID-x226-fmea-gqhh
33
vulnerability VCID-xscf-xy4a-huce
34
vulnerability VCID-xwej-smtp-sfef
35
vulnerability VCID-y97g-phmz-rubu
36
vulnerability VCID-z8f9-7v4h-5kfw
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-emulation/vmware-server@1.0.9.156507
2
url pkg:ebuild/app-emulation/vmware-server@2.5.5.328052
purl pkg:ebuild/app-emulation/vmware-server@2.5.5.328052
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2a5v-kuuc-7uaa
1
vulnerability VCID-2kj7-a6r9-bfft
2
vulnerability VCID-2nvs-t3tu-6qb5
3
vulnerability VCID-2yer-rsfy-h3c2
4
vulnerability VCID-63ya-au98-hkes
5
vulnerability VCID-7yq2-17us-5kdd
6
vulnerability VCID-8fbf-8fea-27d9
7
vulnerability VCID-9enb-qxzr-zka6
8
vulnerability VCID-a1zy-wpsh-ybdq
9
vulnerability VCID-b7yt-1bj3-13bp
10
vulnerability VCID-bz18-eys5-rua3
11
vulnerability VCID-d1tn-aydm-7ucp
12
vulnerability VCID-dc32-wm2e-h7fj
13
vulnerability VCID-e5gp-hpdc-nydk
14
vulnerability VCID-eyg9-ezua-1kfz
15
vulnerability VCID-gdac-gvg7-m3e9
16
vulnerability VCID-ke4g-w7md-pkh6
17
vulnerability VCID-kxd4-h9ev-1yby
18
vulnerability VCID-njd2-w4zv-h3er
19
vulnerability VCID-pw1x-gvns-bbcx
20
vulnerability VCID-q5ts-6ax2-bqgb
21
vulnerability VCID-r2aq-6u1w-dubh
22
vulnerability VCID-r4en-2px9-pkcw
23
vulnerability VCID-r55y-rbsq-pkb9
24
vulnerability VCID-rcck-xn4c-k3at
25
vulnerability VCID-rpue-d1na-gkaa
26
vulnerability VCID-rzpn-qmzx-w3gt
27
vulnerability VCID-sz64-mgub-abf2
28
vulnerability VCID-tawd-pjmt-ukag
29
vulnerability VCID-txkg-jsdf-93e6
30
vulnerability VCID-uw16-r5d8-nfbu
31
vulnerability VCID-wknw-5jfy-c3dh
32
vulnerability VCID-x226-fmea-gqhh
33
vulnerability VCID-xscf-xy4a-huce
34
vulnerability VCID-xwej-smtp-sfef
35
vulnerability VCID-y97g-phmz-rubu
36
vulnerability VCID-z8f9-7v4h-5kfw
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-emulation/vmware-server@2.5.5.328052
3
url pkg:ebuild/app-emulation/vmware-server@6.5.5.328052
purl pkg:ebuild/app-emulation/vmware-server@6.5.5.328052
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2a5v-kuuc-7uaa
1
vulnerability VCID-2kj7-a6r9-bfft
2
vulnerability VCID-2nvs-t3tu-6qb5
3
vulnerability VCID-2yer-rsfy-h3c2
4
vulnerability VCID-63ya-au98-hkes
5
vulnerability VCID-7yq2-17us-5kdd
6
vulnerability VCID-8fbf-8fea-27d9
7
vulnerability VCID-9enb-qxzr-zka6
8
vulnerability VCID-a1zy-wpsh-ybdq
9
vulnerability VCID-b7yt-1bj3-13bp
10
vulnerability VCID-bz18-eys5-rua3
11
vulnerability VCID-d1tn-aydm-7ucp
12
vulnerability VCID-dc32-wm2e-h7fj
13
vulnerability VCID-e5gp-hpdc-nydk
14
vulnerability VCID-eyg9-ezua-1kfz
15
vulnerability VCID-gdac-gvg7-m3e9
16
vulnerability VCID-ke4g-w7md-pkh6
17
vulnerability VCID-kxd4-h9ev-1yby
18
vulnerability VCID-njd2-w4zv-h3er
19
vulnerability VCID-pw1x-gvns-bbcx
20
vulnerability VCID-q5ts-6ax2-bqgb
21
vulnerability VCID-r2aq-6u1w-dubh
22
vulnerability VCID-r4en-2px9-pkcw
23
vulnerability VCID-r55y-rbsq-pkb9
24
vulnerability VCID-rcck-xn4c-k3at
25
vulnerability VCID-rpue-d1na-gkaa
26
vulnerability VCID-rzpn-qmzx-w3gt
27
vulnerability VCID-sz64-mgub-abf2
28
vulnerability VCID-tawd-pjmt-ukag
29
vulnerability VCID-txkg-jsdf-93e6
30
vulnerability VCID-uw16-r5d8-nfbu
31
vulnerability VCID-wknw-5jfy-c3dh
32
vulnerability VCID-x226-fmea-gqhh
33
vulnerability VCID-xscf-xy4a-huce
34
vulnerability VCID-xwej-smtp-sfef
35
vulnerability VCID-y97g-phmz-rubu
36
vulnerability VCID-z8f9-7v4h-5kfw
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-emulation/vmware-server@6.5.5.328052
4
url pkg:ebuild/app-emulation/vmware-workstation@2.5.5.328052
purl pkg:ebuild/app-emulation/vmware-workstation@2.5.5.328052
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2a5v-kuuc-7uaa
1
vulnerability VCID-2kj7-a6r9-bfft
2
vulnerability VCID-2nvs-t3tu-6qb5
3
vulnerability VCID-2yer-rsfy-h3c2
4
vulnerability VCID-63ya-au98-hkes
5
vulnerability VCID-7yq2-17us-5kdd
6
vulnerability VCID-8fbf-8fea-27d9
7
vulnerability VCID-9enb-qxzr-zka6
8
vulnerability VCID-a1zy-wpsh-ybdq
9
vulnerability VCID-b7yt-1bj3-13bp
10
vulnerability VCID-bz18-eys5-rua3
11
vulnerability VCID-d1tn-aydm-7ucp
12
vulnerability VCID-dc32-wm2e-h7fj
13
vulnerability VCID-e5gp-hpdc-nydk
14
vulnerability VCID-eyg9-ezua-1kfz
15
vulnerability VCID-gdac-gvg7-m3e9
16
vulnerability VCID-ke4g-w7md-pkh6
17
vulnerability VCID-kxd4-h9ev-1yby
18
vulnerability VCID-njd2-w4zv-h3er
19
vulnerability VCID-pw1x-gvns-bbcx
20
vulnerability VCID-q5ts-6ax2-bqgb
21
vulnerability VCID-r2aq-6u1w-dubh
22
vulnerability VCID-r4en-2px9-pkcw
23
vulnerability VCID-r55y-rbsq-pkb9
24
vulnerability VCID-rcck-xn4c-k3at
25
vulnerability VCID-rpue-d1na-gkaa
26
vulnerability VCID-rzpn-qmzx-w3gt
27
vulnerability VCID-sz64-mgub-abf2
28
vulnerability VCID-tawd-pjmt-ukag
29
vulnerability VCID-txkg-jsdf-93e6
30
vulnerability VCID-uw16-r5d8-nfbu
31
vulnerability VCID-wknw-5jfy-c3dh
32
vulnerability VCID-x226-fmea-gqhh
33
vulnerability VCID-xscf-xy4a-huce
34
vulnerability VCID-xwej-smtp-sfef
35
vulnerability VCID-y97g-phmz-rubu
36
vulnerability VCID-z8f9-7v4h-5kfw
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-emulation/vmware-workstation@2.5.5.328052
5
url pkg:ebuild/app-emulation/vmware-workstation@6.5.5.328052
purl pkg:ebuild/app-emulation/vmware-workstation@6.5.5.328052
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2a5v-kuuc-7uaa
1
vulnerability VCID-2kj7-a6r9-bfft
2
vulnerability VCID-2nvs-t3tu-6qb5
3
vulnerability VCID-2yer-rsfy-h3c2
4
vulnerability VCID-63ya-au98-hkes
5
vulnerability VCID-7yq2-17us-5kdd
6
vulnerability VCID-8fbf-8fea-27d9
7
vulnerability VCID-9enb-qxzr-zka6
8
vulnerability VCID-a1zy-wpsh-ybdq
9
vulnerability VCID-b7yt-1bj3-13bp
10
vulnerability VCID-bz18-eys5-rua3
11
vulnerability VCID-d1tn-aydm-7ucp
12
vulnerability VCID-dc32-wm2e-h7fj
13
vulnerability VCID-e5gp-hpdc-nydk
14
vulnerability VCID-eyg9-ezua-1kfz
15
vulnerability VCID-gdac-gvg7-m3e9
16
vulnerability VCID-ke4g-w7md-pkh6
17
vulnerability VCID-kxd4-h9ev-1yby
18
vulnerability VCID-njd2-w4zv-h3er
19
vulnerability VCID-pw1x-gvns-bbcx
20
vulnerability VCID-q5ts-6ax2-bqgb
21
vulnerability VCID-r2aq-6u1w-dubh
22
vulnerability VCID-r4en-2px9-pkcw
23
vulnerability VCID-r55y-rbsq-pkb9
24
vulnerability VCID-rcck-xn4c-k3at
25
vulnerability VCID-rpue-d1na-gkaa
26
vulnerability VCID-rzpn-qmzx-w3gt
27
vulnerability VCID-sz64-mgub-abf2
28
vulnerability VCID-tawd-pjmt-ukag
29
vulnerability VCID-txkg-jsdf-93e6
30
vulnerability VCID-uw16-r5d8-nfbu
31
vulnerability VCID-wknw-5jfy-c3dh
32
vulnerability VCID-x226-fmea-gqhh
33
vulnerability VCID-xscf-xy4a-huce
34
vulnerability VCID-xwej-smtp-sfef
35
vulnerability VCID-y97g-phmz-rubu
36
vulnerability VCID-z8f9-7v4h-5kfw
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-emulation/vmware-workstation@6.5.5.328052
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-3733
reference_id
reference_type
scores
0
value 0.9006
scoring_system epss
scoring_elements 0.9958
published_at 2026-04-01T12:55:00Z
1
value 0.9006
scoring_system epss
scoring_elements 0.99581
published_at 2026-04-02T12:55:00Z
2
value 0.9006
scoring_system epss
scoring_elements 0.99582
published_at 2026-04-04T12:55:00Z
3
value 0.9006
scoring_system epss
scoring_elements 0.99583
published_at 2026-04-07T12:55:00Z
4
value 0.9006
scoring_system epss
scoring_elements 0.99584
published_at 2026-04-13T12:55:00Z
5
value 0.9006
scoring_system epss
scoring_elements 0.99585
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-3733
1
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/33310.nse
reference_id CVE-2009-3733;OSVDB-59440
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/33310.nse
2
reference_url https://www.securityfocus.com/bid/36842/info
reference_id CVE-2009-3733;OSVDB-59440
reference_type exploit
scores
url https://www.securityfocus.com/bid/36842/info
3
reference_url https://security.gentoo.org/glsa/201209-25
reference_id GLSA-201209-25
reference_type
scores
url https://security.gentoo.org/glsa/201209-25
Weaknesses
Exploits
0
date_added 2009-10-27
description VMware Server 2.0.1 / ESXi Server 3.5 - Directory Traversal
required_action null
due_date null
notes null
known_ransomware_campaign_use true
source_date_published 2009-10-27
exploit_type remote
platform multiple
source_date_updated 2014-05-12
data_source Exploit-DB
source_url https://www.securityfocus.com/bid/36842/info
1
date_added null
description
This modules exploits the VMware Server Directory Traversal
        vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before
        2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5
        allows remote attackers to read arbitrary files. Common VMware server ports
        80/8222 and 443/8333 SSL.  If you want to download the entire VM, check out
        the gueststealer tool.
required_action null
due_date null
notes
Stability:
  - crash-safe
SideEffects:
  - ioc-in-logs
Reliability: []
known_ransomware_campaign_use false
source_date_published null
exploit_type null
platform
source_date_updated null
data_source Metasploit
source_url https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/scanner/vmware/vmware_server_dir_trav.rb
Severity_range_scorenull
Exploitability2.0
Weighted_severity0.8
Risk_score1.6
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-sz64-mgub-abf2