VULNERABILITY INTELLIGENCE
CVE-2006-3589
CVSS score3.6 LOW
EPSS probability0.43%
CISA KEVNot currently listed
Published2006-07-21
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:N
Description
vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key.