Skip to content
Back to search

CVE-2011-1789

MEDIUM
5.0NVD

Summary

generated automatically from NVD data

The self-extracting installer in the vSphere Client Installer package shipped with VMware vCenter 4.0 and 4.1, ESXi 4.x, and ESX 4.x lacks a digital signature. Because of this, remote attackers could more easily spoof the software distribution and deliver a Trojan horse installer in place of the legitimate one. The flaw is classified as CWE-310 and carries a CVSS v2.0 score of 5.0 (MEDIUM), with a network attack vector and a partial integrity impact.

NVD description

The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, VMware ESXi 4.x before 4.1 Update 1, and VMware ESX 4.x before 4.1 Update 1 does not have a digital signature, which might make it easier for remote attackers to spoof the software distribution via a Trojan horse installer.

Share:

EPSS · FIRST.org

1.9%probability of exploitation in the next 30 days

Higher than 79% of scored CVEs

EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.

CVSS v2.0 Score

5.0
/ 10.0
MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N

Information

Published
9 mai 2011
Updated
16 juin 2026
Status
Modified
Source
cve@mitre.org

Affected products

vmware esx
Versions : 4.0, 4.1
vmware esxi
Versions : 4.0, 4.1
vmware vcenter
Versions : 4.0, 4.1

Weaknesses (CWE)

CWE-310

References (6)

Similar CVEs

Other vulnerabilities of type CWE-310

…

Monitor your products

Get automatic alerts for every new CVE affecting your equipment.

Enable monitoring