CVE-2012-2448

VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial of service memory overwrite via NFS traffic...

CVE-2012-2450

CVE-2012-2450 covers VMware products (Workstation 8.x before 8.0.3, Player 4.x before 4.0.3, Fusion 4.x before 4.1.2, ESXi/ESX 3.5–5.0) with an improper handling/registration of SCSI devices. The flaw enables an untrusted guest user with admin privileges to trigger an out‑of‑bounds memory write, ...

CVE-2012-1516

Vulnerability CVE-2012-1516 affects VMware VMX RPC handling in ESXi/ESX 3.5–4.1 (and related Workstation/Player components). A guest user could cause a denial of service or, potentially, execute code on the host via data-pointer related paths. Exploitation relies on triggering problematic RPC han...

CVE-2012-1516: Improper Restriction of Operations within the Bounds of a Memory Buffer

The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service memory overwrite and process crash or possibly execute arbitrary code on the host OS via vectors involving data pointers...

CVE-2012-2448: Improper Restriction of Operations within the Bounds of a Memory Buffer

VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial of service memory overwrite via NFS traffic...

CVE-2012-2450: Undefined Security Weakness

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly register SCSI devices, which allows guest OS users to cause a denial of service invalid write operation and VMX process...

CVE-2012-2449: Improper Restriction of Operations within the Bounds of a Memory Buffer

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly configure the virtual floppy device, which allows guest OS users to cause a denial of service out-of-bounds write...

VMware ESXi/ESX patches address critical security issues (VMSA-2012-0009)

The remote ESXi is missing one or more security related Updates from VMSA-2012-0009. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMSA-2012-0009 VMware Workstation, Player, ESXi and ESX patches address critical security issues

The remote ESXi is missing one or more security related Updates from VMSA-2012-0009. Summary VMware Workstation, Player, ESXi and ESX patches address critical security issues Relevant releases Workstation 8.0.2 Player 4.0.2 Fusion 4.1.2 ESXi 5.0 without patch ESXi500-201205401-SG ESXi 4.1 without...

VMSA-2012-0008 : VMware ESX updates to ESX Service Console

a. ESX third-party update for Service Console kernel The ESX Service Console Operating System COS kernel is updated which addresses several security issues in the COS kernel. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2011-3191, CVE-2011-4348 and...

VMware ESX updates to ESX Service Console

a. ESX third party update for Service Console kernelThe ESX Service Console Operating System COS kernel is updated which addresses several security issues in the COS kernel.The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2011-3191, CVE-2011-4348 and...

VMWare ESXi / ESX weak permissions

VMWare Tools folder weak permissions...

VMSA-2012-0007 VMware hosted products and ESXi/ESX patches address privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2012-0007 Synopsis: VMware hosted products and ESXi/ESX patches address privilege escalation Issue date: 2012-04-12 Updated on: 2012-04-...

VMSA-2012-0008:VMware ESX updates to ESX Service Console

VMSA-2012-0008.1 VMware ESX updates to ESX Service Console VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0008.1 VMware Security Advisory Synopsis: VMware ESX updates to ESX Service Console VMware Security Advisory Issue date: 2012-04-26 VMware Security Advisory Updated...

CVE-2012-1518: Undefined Security Weakness

VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 use an incorrect ACL for the VMware Tools folder, which allows guest OS users to gain guest OS privileges via unspecified vectors...

VMSA-2010-0007: VMware hosted products, vCenter Server and ESX patches resolve multiple security issues

The remote ESXi is missing one or more security related Updates from VMSA-2010-0007. Summary VMware hosted products, vCenter Server and ESX patches resolve multiple security issues Relevant releases VMware Workstation 7.0, VMware Workstation 6.5.3 and earlier, VMware Player 3.0, VMware Player 2.5...

VMware ESXi/ESX patches resolve multiple security issues (VMSA-2010-0007)

The remote ESXi is missing one or more security related Updates from VMSA-2010-0007. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMSA-2010-0009: ESXi utilities and ESX Service Console third party updates

The remote ESXi is missing one or more security related Updates from VMSA-2010-0009. Summary ESXi update for ntp and ESX Console OS COS updates for COS kernel, openssl, krb5, gcc, bind, gzip, sudo. Relevant releases VMware ESXi 4.0.0 without patch ESXi400-201005401-SG VMware ESX 4.0.0 without...

VMware ESXi/ESX patches address privilege escalation (VMSA-2012-0007)

The remote ESXi is missing one or more security related Updates from VMSA-2012-0007. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMSA-2012-0007:VMware hosted products and ESXi/ESX patches address privilege escalation

VMSA-2012-0007.1 VMware hosted products and ESXi/ESX patches address privilege escalation VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0007.1 VMware Security Advisory Synopsis: VMware hosted products and ESXi/ESX patches address privilege escalation VMware Security...