VMSA-2007-0004.1 Updated: Multiple Denial-of-Service issues fixed and directory traversal vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2007-0004.1 Synopsis: Updated: Multiple Denial-of-Service issues fixed and directory traversal vulnerability Issue date: 2007-05-04...

CVE-2007-1270

Double free vulnerability in VMware ESX Server 3.0.0 and 3.0.1 allows attackers to cause a denial of service crash, obtain sensitive information, or possibly execute arbitrary code via unspecified vectors...

Buffer overflow

Buffer overflow in VMware ESX Server 3.0.0 and 3.0.1 might allow attackers to gain privileges or cause a denial of service application crash via unspecified vectors...

CVE-2007-1271

Buffer overflow in VMware ESX Server 3.0.0 and 3.0.1 might allow attackers to gain privileges or cause a denial of service application crash via unspecified vectors...

Double free

Double free vulnerability in VMware ESX Server 3.0.0 and 3.0.1 allows attackers to cause a denial of service crash, obtain sensitive information, or possibly execute arbitrary code via unspecified vectors...

CVE-2007-1271

CVE-2007-1271 involves a buffer overflow in VMware ESX Server 3.0.0 and 3.0.1 that may allow an attacker to gain privileges or cause a denial of service (application crash). The affected product is VMware ESX Server; the underlying cause is a buffer overflow. The vectors are not specified in the ...

CVE-2007-1270: Undefined Security Weakness

Double free vulnerability in VMware ESX Server 3.0.0 and 3.0.1 allows attackers to cause a denial of service crash, obtain sensitive information, or possibly execute arbitrary code via unspecified vectors...

CVE-2007-1270

Double free vulnerability in VMware ESX Server 3.0.0 and 3.0.1 allows attackers to cause a denial of service crash, obtain sensitive information, or possibly execute arbitrary code via unspecified vectors...

CVE-2007-1271: Undefined Security Weakness

Buffer overflow in VMware ESX Server 3.0.0 and 3.0.1 might allow attackers to gain privileges or cause a denial of service application crash via unspecified vectors...

CVE-2007-1270

CVE-2007-1270 involves a double free vulnerability in VMware ESX Server 3.0.0 and 3.0.1. The root cause is a double free in a component that can lead to a crash (DoS), potential information leak, and possibly arbitrary code execution via unspecified vectors. Exploitation details are not provided ...

VMware ESX多个信息泄露漏洞

VMWare ESX Server是一款虚拟主机的服务程序。 VMWare ESX Server存在多个安全问题，远程攻击者可以利用漏洞获得敏感信息。 VMWare ESX Server包含的管理接口是传统的WEB应用程序，使用的会话ID包含在两个COOKIE中（vmware.mui.kid和vmware.mui.sid），这会话ID格式包含BASE64编码的用户帐户和密码，如果攻击者可以通过其他机制访问COOKIE，就可以获得验证信息。 另外管理接口还提供更改密码的功能，通过HTML表单，用户需要输入和确定新的密码，如更改ROOT用户的密码为"test"，就需要如下请求：...

Linux Kernel共享内存绕过安全限制漏洞

Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel实现上存在漏洞，允许本地用户绕过IPC权限控制，可能导致内存信息泄露。 通过使用mprotect可以获得以只读方式attach的共享内存的写权限。 Linux kernel 2.6.16 Linux kernel 2.4.x VMWare ESX Server 2.5.4 VMWare ESX Server 2.5.3 VMWare ESX Server 2.1.3 VMWare ESX Server 2.0.2 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

VMSA-2006-0009 - VMware ESX Server 3.0.0 AMD fxsave/restore issue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0009 Synopsis: VMware ESX Server 3.0.0 AMD fxsave/restore issue Knowledge base URL:http://kb.vmware.com/kb/2533126 Issue date:...

VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0008 Synopsis: VMware ESX Server 2.0.2 Upgrade Patch 2 Patch URL: http://www.vmware.com/download/esx/esx-202-200610-patch.html...

VMSA-2006-0005 - VMware ESX Server 2.5.4 Upgrade Patch 1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0005 Synopsis: VMware ESX Server 2.5.4 Upgrade Patch 1 Patch URL: http://www.vmware.com/download/esx/esx-254-200610-patch.html...

VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0007 Synopsis: VMware ESX Server 2.1.3 Upgrade Patch 2 Patch URL: http://www.vmware.com/download/esx/esx-213-200610-patch.html...

VMWare ESX Server multiple security vulnerabilities

Invalid AMD fxsave/restore instructions handling. Vulnerabilities in embedded packages...

VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0006 Synopsis: VMware ESX Server 2.5.3 Upgrade Patch 4 Patch URL: http://www.vmware.com/download/esx/esx-253-200610-patch.html...

VMware ESX多个敏感信息泄露漏洞

VMware ESX Server是一个适用于任何系统环境的企业级虚拟计算机软件。 VMware ESX Server的管理界面使用了两个Cookies（vmware.mui.kid和vmware.mui.sid）中的会话ID。会话ID格式是私有的，包含有简单base64编码格式的用户帐号和口令。如果攻击者可以通过任何机制（如跨站脚本攻击）访问了Cookies的话，就可以获取认证凭据。 VMware ESX Server的管理界面允许用户更改口令。如果是root用户的话，还可以更改其他用户的口令。在更改口令时，会通过一个HTML表单要求用户输入并确认新的口令，然后通过HTTP...

VMware ESX Server management interface logs passwords in cleartext in a world-readable file

Overview Certain versions of VMware ESX Server store passwords in a cleartext file that all users have read permissions to. Description Per the VMware ESX Server datasheet:ESX Server installs directly on the server hardware, or “bare metal,” and inserts a robust virtualization layer between the...