CVE-2012-5703

The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service host daemon crash via an invalid value in a 1 RetrieveProp or 2 RetrievePropEx SOAP request...

Cross site request forgery (csrf)

The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service host daemon crash via an invalid value in a 1 RetrieveProp or 2 RetrievePropEx SOAP request...

CVE-2012-5703

CVE-2012-5703 affects VMware ESXi 4.1 / ESX 4.1 via the vSphere API. The vulnerability arises from improper handling of certain SOAP requests in RetrieveProp and RetrievePropEx, allowing remote attackers to cause a denial-of-service (host daemon crash). Exploitation is described as remote and una...

VMware Security Update Fixes DoS, Other Vulnerabilities

Virtualization software maker VMware shipped a security update for its vSphere API yesterday that resolved a denial of service vulnerability in ESX and ESXi, as well as adding a number of open source security updates to the ESX Service Console. The patch affects the following releases: VMware ESX...

VMSA-2012-0016: VMware security updates for vSphere API and ESX Service Console

The remote ESXi is missing one or more security related Updates from VMSA-2012-0016. Summary VMware has updated the vSphere API to address a denial of service vulnerability in ESX and ESXi. VMware has also updated the ESX Service Console to include several open source security updates. Relevant...

VMware ESXi/ESX security updates (VMSA-2012-0016)

The remote ESXi is missing one or more security related Updates from VMSA-2012-0016. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Unable to Mount VPower NFS Specified Key Name or Identifier Already Exists

Challenge During a Veeam vPower NFS-based operation SureBackup, Instant Recovery, Instant Disk Recovery, or Other-OS FLR, the following errors may occur: Unable to mount vPower NFS volume :/VeeamBackup. Fault "AlreadyExistsFault", Error The specified key, name, or identifier already exists. Unabl...

More VMware ESX Source Code Posted Online

For the third time this year, VMware ESX source code has been posted online. A hacker known as Stun claiming to be affiliated with Anonymous tweeted a link to a torrent site hosting the stolen VMkernel source code. VMware director of platform security Iain Mulholland acknowledged the breach on...

VMware ESXi/ESX updates to third party libraries (VMSA-2012-0013)

The remote ESXi is missing one or more security related Updates from VMSA-2012-0013. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMSA-2012-0013 VMware vSphere and vCOps updates to third party libraries.

The remote ESXi is missing one or more security related Updates from VMSA-2012-0013. Summary VMware has updated several third party libraries in vSphere and vcOps to address multiple security vulnerabilities. Relevant releases VMware vCenter 4.1 without Update 3 VMware vCenter Update Manager 4.1...

VMSA-2012-0012 : VMware ESXi update to third-party library

a. ESXi update to third-party component libxml2 The libxml2 third-party library has been updated which addresses multiple security issues. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2010-4008, CVE-2011-0216, CVE-2011-1944, CVE-2011-2834, CVE-2011-390...

VMSA-2012-0012 VMware ESXi update addresses several security issues.

The remote ESXi is missing one or more security related Updates from VMSA-2012-0012. Summary VMware ESXi update addresses several security issues. Relevant releases ESX 5.0 without patch ESXi500-201207101-SG ESXi 4.1 without patch ESXi410-201208101-SG Problem Description a. ESXi update to third...

VMware ESXi/ESX update addresses several security issues (VMSA-2012-0012)

The remote ESXi is missing one or more security related Updates from VMSA-2012-0012. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMware ESXi update to third party library

a. ESXi update to third party component libxml2 The libxml2 third party library has been updated which addresses multiple security issues. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2010-4008, CVE-2011-0216,CVE-2011-1944, CVE-2011-2834,...

VMSA-2012-0012:VMware ESXi update to third party library

VMSA-2012-0012.2 VMware ESXi update to third party library VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0012.2 VMware Security Advisory Synopsis: VMware ESXi update to third party library VMware Security Advisory Issue date: 2012-07-12 VMware Security Advisory Updated...

Monitoring of standalone hosts fails

Challenge No topology is created for standalone ESX/ESXi hosts. nworks logs contain the following errors: 0.0017 EXCOL+ VP120 retrieveHostProperties failed, buildMorList: zero count at nworksCore.Collectors.VimUtil.buildMorListList1 nodes at...

VMSA-2012-0011 VMware hosted products and ESXi and ESX patches address security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2012-0011 Synopsis: VMware hosted products and ESXi and ESX patches address security issues Issue date: 2012-06-14 Updated on: 2012-06-1...

VMSA-2012-0011 : VMware hosted products and ESXi and ESX patches address security issues

a. VMware Host Checkpoint file memory corruption Input data is not properly validated when loading Checkpoint files. This may allow an attacker with the ability to load a specially crafted Checkpoint file to execute arbitrary code on the host. Workaround - None identified Mitigation - Do not impo...

VMSA-2012-0011 VMware Workstation, Player, Fusion, ESXi and ESX patches address security issues.

The remote ESXi is missing one or more security related Updates from VMSA-2012-0011. Summary VMware Workstation, Player, Fusion, ESXi and ESX patches address security issues. Relevant releases: Workstation 8.0.3 Workstation 7.1.5 Player 4.0.3 Player 3.1.5 Fusion 4.1.2 ESXi 5.0 without patch...

VMware ESXi/ESX patches address security issues (VMSA-2012-0011)

The remote ESXi is missing one or more security related Updates from VMSA-2012-0011. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...