Unrated severityNVD Advisory· Published Jul 31, 2006· Updated Jun 16, 2026
CVE-2006-2481
CVE-2006-2481
Description
VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and vmware.mui.sid cookies, which allows attackers to gain privileges by obtaining the cookies using attacks such as cross-site scripting (CVE-2005-3619).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:o:vmware:esx:2.0:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:o:vmware:esx:2.0:*:*:*:*:*:*:*
- cpe:2.3:o:vmware:esx:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:vmware:esx:2.1:*:*:*:*:*:*:*
- cpe:2.3:o:vmware:esx:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:o:vmware:esx:2.1.2:*:*:*:*:*:*:*
- cpe:2.3:o:vmware:esx:2.5:*:*:*:*:*:*:*
- cpe:2.3:o:vmware:esx:2.5.2:*:*:*:*:*:*:*
- Range: >= 2.0.0 < 2.0.2; >= 2.x < 2.5.2 patch 4
Patches
Vulnerability mechanics
References
7- secunia.com/advisories/21230nvdVendor Advisory
- www.corsaire.com/advisories/c060512-001.txtnvdVendor Advisory
- www.vupen.com/english/advisories/2006/3075nvdVendor Advisory
- kb.vmware.com/kb/2118366nvd
- www.securityfocus.com/archive/1/441728/100/100/threadednvd
- www.securityfocus.com/archive/1/441825/100/100/threadednvd
- www.securityfocus.com/bid/19249nvd
News mentions
0No linked articles in our index yet.