CVE-2009-1244 and ESX 3.0.1

[JMButler]

Is the vulnerability reported in CVE-2009-1244 applicable to ESX 3.0.1? 3.0.1 isn't listed in the vulnerability report, but I'm wondering if that's because it's reached its end of support date? I thought I had seen a patch released for it for 3.0.1 a while ago, but now I can only find patches for later version of ESX.

[Troy_Clavell]

My guess would be that since that general support is EOL for 3.0.x there was no patch. The last patch release for 3.0.1 was back in September of '08

....and according to this, you must be atleast at 3.0.2

[kjb007]

May not mean anything, but they do list 2.5.5 as affected version as well.

-KjB

VMware vExpert

[Troy_Clavell]

ESX 2.5.5 ESX not affected

[kjb007]

Sorry, I meant not affected, but listed.

-KjB

VMware vExpert

[Troy_Clavell]