CVE-2012-1516

The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service memory overwrite and process crash or possibly execute arbitrary code on the host OS via vectors involving data pointers...

CVE-2012-2448

CVE-2012-2448 affects VMware ESXi/ESX (3.5–5.0, 3.5–4.1 respectively) via an NFS traffic handling flaw that enables remote code execution or memory overwrite. Connected sources (VMSA-2012-0009 and Nessus entries) confirm a remote exploitation vector over NFS and indicate that patched releases exi...

CVE-2012-1517

The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service memory overwrite and process crash or possibly execute arbitrary code on the host OS via vectors involving function pointers...

CVE-2012-2448

VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial of service memory overwrite via NFS traffic...

CVE-2012-1517

CVE-2012-1517 affects VMware ESXi/ESX 4.1 where the VMX process mishandles RPC commands, allowing a guest user to cause a memory overwrite and denial of service or potentially execute code on the host via function pointer vectors. Connected sources confirm the issue is tied to RPC handling in VMX...

CVE-2012-2449

CVE-2012-2449 describes an out-of-bounds memory write in the virtual floppy device configuration that could crash the VMX process or allow code execution on the host, given administrative guest privileges. Affected VMware products include Workstation 8.x (pre-8.0.3), Player 4.x (pre-4.0.3), Fusio...

CVE-2012-2450

CVE-2012-2450 covers VMware products (Workstation 8.x before 8.0.3, Player 4.x before 4.0.3, Fusion 4.x before 4.1.2, ESXi/ESX 3.5–5.0) with an improper handling/registration of SCSI devices. The flaw enables an untrusted guest user with admin privileges to trigger an out‑of‑bounds memory write, ...

CVE-2012-1516

Vulnerability CVE-2012-1516 affects VMware VMX RPC handling in ESXi/ESX 3.5–4.1 (and related Workstation/Player components). A guest user could cause a denial of service or, potentially, execute code on the host via data-pointer related paths. Exploitation relies on triggering problematic RPC han...

VMware ESXi/ESX patches address critical security issues (VMSA-2012-0009)

The remote ESXi is missing one or more security related Updates from VMSA-2012-0009. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMSA-2012-0009 VMware Workstation, Player, ESXi and ESX patches address critical security issues

The remote ESXi is missing one or more security related Updates from VMSA-2012-0009. Summary VMware Workstation, Player, ESXi and ESX patches address critical security issues Relevant releases Workstation 8.0.2 Player 4.0.2 Fusion 4.1.2 ESXi 5.0 without patch ESXi500-201205401-SG ESXi 4.1 without...

VMWare ESXi / ESX weak permissions

VMWare Tools folder weak permissions...

VMSA-2012-0007 VMware hosted products and ESXi/ESX patches address privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2012-0007 Synopsis: VMware hosted products and ESXi/ESX patches address privilege escalation Issue date: 2012-04-12 Updated on: 2012-04-...

VMware ESXi/ESX patches resolve multiple security issues (VMSA-2010-0007)

The remote ESXi is missing one or more security related Updates from VMSA-2010-0007. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMSA-2010-0009: ESXi utilities and ESX Service Console third party updates

The remote ESXi is missing one or more security related Updates from VMSA-2010-0009. Summary ESXi update for ntp and ESX Console OS COS updates for COS kernel, openssl, krb5, gcc, bind, gzip, sudo. Relevant releases VMware ESXi 4.0.0 without patch ESXi400-201005401-SG VMware ESX 4.0.0 without...

VMSA-2012-0007 VMware hosted products and ESX patches address privilege escalation

The remote ESXi is missing one or more security related Updates from VMSA-2012-0007. Summary VMware hosted products and ESXi/ESX patches address privilege escalation. Relevant releases Workstation 8.0.1 and earlier Player 4.0.1 and earlier Fusion 4.1.1 and earlier ESXi 5.0 without patch...

VMware ESXi/ESX patches address privilege escalation (VMSA-2012-0007)

The remote ESXi is missing one or more security related Updates from VMSA-2012-0007. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMSA-2012-0007:VMware hosted products and ESXi/ESX patches address privilege escalation

VMSA-2012-0007.1 VMware hosted products and ESXi/ESX patches address privilege escalation VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0007.1 VMware Security Advisory Synopsis: VMware hosted products and ESXi/ESX patches address privilege escalation VMware Security...

VMSA-2012-0006 VMware ESXi and ESX address several security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2012-0006 Synopsis: VMware ESXi and ESX address several security issues Issue date: 2012-03-29 Updated on: 2012-03-29 initial advisory C...

CVE-2012-1515

VMware ESXi 3.5, 4.0, and 4.1 and ESX 3.5, 4.0, and 4.1 do not properly implement port-based I/O operations, which allows guest OS users to gain guest OS privileges by overwriting memory locations in a read-only memory block associated with the Virtual DOS Machine...

Design/Logic Flaw

VMware ESXi 3.5, 4.0, and 4.1 and ESX 3.5, 4.0, and 4.1 do not properly implement port-based I/O operations, which allows guest OS users to gain guest OS privileges by overwriting memory locations in a read-only memory block associated with the Virtual DOS Machine...