VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Feb 22, 2013· Updated Apr 29, 2026

CVE-2013-1659

CVE-2013-1659

Description

VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 do not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption) by modifying the client-server data stream.

Affected products

24
  • VMware/Vcenter Server8 versions
    cpe:2.3:a:vmware:vcenter_server:4.0:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:vmware:vcenter_server:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:4.0:update_1:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:4.0:update_2:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:4.0:update_3:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:4.0:update_4:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:4.0:update_4a:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:5.0:update_1:*:*:*:*:*:*
  • VMware/Vcenter Server Appliance2 versions
    cpe:2.3:a:vmware:vcenter_server_appliance:5.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:vmware:vcenter_server_appliance:5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server_appliance:5.1.0a:*:*:*:*:*:*:*
  • VMware/Esxi14 versions
    cpe:2.3:o:vmware:esxi:3.5:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:o:vmware:esxi:3.5:*:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:3.5:1:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:4.0:*:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:4.0:1:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:4.0:2:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:4.0:3:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:4.0:4:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:4.1:*:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:4.1:1:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:4.1:2:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:5.0:*:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:5.0:1:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:5.0:2:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:5.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.