93 Vulnerabilities Found in VMware

VMware has advised of a total of 93 vulnerabilities in several of its products, including ESX Server, Server, VirtualCenter and vCenter. Read the full article. The H Security...

VMSA-2009-0016 : VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components.

"a. JRE Security Update JRE update to version 1.5.020, which addresses multiple security issues that existed in earlier releases of JRE. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the following names to the security issues fixed in JRE 1.5.018: CVE-2009-1093,...

VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components

a. JRE Security UpdateJRE update to version 1.5.020, which addresses multiple securityissues that existed in earlier releases of JRE. The Common Vulnerabilities and Exposures project cve.mitre.org hasassigned the following names to the security issues fixed inJRE 1.5.018: CVE-2009-1093,...

VMSA-2009-0016:VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components

VMSA-2009-0016.6 VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0016.6 VMware Security Advisory Synopsis: VMware vCenter and ESX update release and vMA...

CVE-2009-3733

Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2009-3733

A directory traversal vulnerability in the VMware Host Agent (hostd) service allows remote attackers to read arbitrary files from the host system. This flaw affects VMware Server 1.x (before 1.0.10 build 203137), 2.x (before 2.0.2 build 203138) on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and ...

CVE-2009-2267: Undefined Security Weakness

VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138, VMware Fusion 2.x before 2.0.6 build 196839, VMware ESXi 3.5 and 4.0, and...

PT-2009-4703

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 6.5.x through 6.5.3 build 185404 VMware Player versions 2.5.x through 2.5.3 build 185404 VMware ACE versions 2.5.x through 2.5.3 build 185404 VMware Server versions 1.x through 1.0.10 build 203137 VMware Server...

CVE-2009-3733: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors...

PT-2009-5987 · Vmware · Vmware Esxi +1

Name of the Vulnerable Software and Affected Versions: VMware Server versions 1.x through 1.0.9 and 2.x through 2.0.1 VMware ESXi version 3.5 VMware ESX versions 3.0.3 and 3.5 Description: A directory traversal issue allows remote attackers to read arbitrary files via unspecified vectors...

Invalid #PF Exception Code in VMware can result in Guest Privilege Escalation

No description provided by source. Invalid PF Exception Code in VMware can result in Guest Privilege Escalation ----------------------------------------------------------------------------- In protected mode, cpl is usually equal to the two least significant bits of the cs register. However, ther...

VMware PF异常本地权限提升漏洞

BUGTRAQ ID: 36841 CVECAN ID: CVE-2009-2267 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 在受保护的模式中，cpl通常等于cs寄存器最不重要的两位，但也有一个例外：在Virtual-8086模式中，无论cs寄存器为何值cpl总是为 3（最少权限）。当处理器出现PF异常时，会向包含有标记的栈上Push一个异常代码，操作系统使用这个标记确定正确地操作阶段。其中的一个标记为 U/S（user/supervisor），当处理器处于用户态时出现错误会设置这个标记。...

VMSA-2009-0015 : VMware hosted products and ESX patches resolve two security issues

a. Mishandled exception on page faults An improper setting of the exception code on page faults may allow for local privilege escalation on the guest operating system. This vulnerability does not affect the host system. VMware would like to thank Tavis Ormandy and Julien Tinnes of the Google...

VMware Virtual 8086 - Linux Local Ring0

Bugtraq ID: 36841 Class: Design Error Published: Oct 27 2009 12:00AM Updated: Oct 27 2009 09:18PM Credit: Tavis Ormandy and Julien Tinnes of the Google Security Team Vulnerable: VMWare Workstation 6.5.3 VMWare Workstation 6.5.2 build 156735 VMWare Workstation 6.5.2 VMWare Workstation 6.5.1 VMWare...

VMware Server 2.0.1 ESXi Server 3.5 - Directory Traversal

VMware Server 2.0.1 ESXi Server 3.5 - Directory Traversal source: https://www.securityfocus.com/bid/36842/info VMware products are prone to a directory-traversal vulnerability because they fail to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain...

VMWare Virtual 8086 Linux Local Ring0 Exploit

Exploit for unknown platform in category local exploits ============================================= VMWare Virtual 8086 Linux Local Ring0 Exploit ============================================= Title: VMWare Virtual 8086 Linux Local Ring0 Exploit CVE-ID: OSVDB-ID: Author: Tavis Ormandy and Julien...

VMware Server 2.0.1 / ESXi Server 3.5 - Directory Traversal

source: https://www.securityfocus.com/bid/36842/info VMware products are prone to a directory-traversal vulnerability because they fail to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information from the host operating system that...

VMSA-2009-0014 : VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues

a. Service Console update for DHCP and third-party library update for DHCP client. DHCP is an Internet-standard protocol by which a computer can be connected to a local network, ask to be given configuration information, and receive from a server enough information to configure itself as a member...

VMSA-2009-0002 : VirtualCenter Update 4 and ESX patch update Tomcat to version 5.5.27

a. Update for VirtualCenter and ESX patch update Apache Tomcat version to 5.5.27 Update for VirtualCenter and ESX patch update the Tomcat package to version 5.5.27 which addresses multiple security issues that existed in the previous version of Apache Tomcat. The Common Vulnerabilities and...

VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues

a. Service Console update for DHCP and third party library update for DHCP client. DHCP is an Internet-standard protocol by which a computer can be connected to a local network, ask to be given configuration information, and receive from a server enough information to configure itself as a member...