VMware宿主产品VMSA-2009-0005多个远程漏洞

BUGTRAQ ID: 34373 CVE ID：CVE-2008-4916 CVE-2008-3761 CVE-2009-1146 CVE-2009-1147 CVE-2009-0910 CVE-2009-0909 CVE-2009-0908 CVE-2009-0177 CVE-2009-0518 CNCVE ID：CNCVE-20084916 CNCVE-20083761 CNCVE-20091146 CNCVE-20091147 CNCVE-20090910 CNCVE-20090909 CNCVE-20090908 CNCVE-20090177 CNCVE-20090518...

CVE-2009-0518

CVE-2009-0518 describes a vulnerability where the VirtualCenter Server password may be retained in the memory of VI Client on VMware products. Affected: VI Client, VirtualCenter Server in VMware VirtualCenter prior to 2.5 Update 4, ESXi 3.5 prior to Update 4, and ESX 3.5 prior to Update 4. Impact...

CVE-2008-4916

CVE-2008-4916 describes a denial-of-service vulnerability in the guest virtual device driver that could crash the host OS. The issue affects VMware products including VMware Workstation (pre-5.5.9/6.x), VMware Player (pre-1.0.9/2.x), VMware ACE (pre-1.0.8/2.x), VMware Server (1.x before 1.0.8/2.0...

CVE-2008-4914

Unspecified vulnerability in VMware ESXi 3.5 before ESXe350-200901401-I-SG and ESX 3.5 before ESX350-200901401-SG allows local administrators to cause a denial of service host crash via a snapshot with a malformed VMDK delta disk...

Security feature bypass

Unspecified vulnerability in VMware ESXi 3.5 before ESXe350-200901401-I-SG and ESX 3.5 before ESX350-200901401-SG allows local administrators to cause a denial of service host crash via a snapshot with a malformed VMDK delta disk...

CVE-2008-4914

Unspecified vulnerability in VMware ESXi 3.5 before ESXe350-200901401-I-SG and ESX 3.5 before ESX350-200901401-SG allows local administrators to cause a denial of service host crash via a snapshot with a malformed VMDK delta disk...

CVE-2008-4914

The CVE-2008-4914 issue affects VMware ESXi 3.5 (before ESXe350-200901401-I-SG) and ESX 3.5 (before ESX350-200901401-SG). Root cause: a malformed VMDK delta disk in a snapshot can be loaded by the host, potentially causing a denial of service via a host crash. VMware’s advisories indicate the vul...

VMSA-2008-0019 VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2008-0019 Synopsis: VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2 Issue dat...

VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2

a. Critical Memory corruption vulnerabilityA memory corruption condition may occur in the virtual machinehardware. A malicious request sent from the guest operatingsystem to the virtual hardware may cause the virtual hardware towrite to uncontrolled physical memory.VMware would like to thank Andr...

VMSA-2008-0019:VMware Hosted products and patches for ESX and ESXi resolve a CRITICAL security issue and update bzip2

VMSA-2008-0019.1 VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2 VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2008-0019.1 VMware Security Advisory Synopsis: VMware Hosted products and patches for ESX and ESXi resolve a...

VMware产品Trap Flag处理本地权限提升漏洞

BUGTRAQ ID: 32168 CVECAN ID: CVE-2008-4915 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMWare在处理指令的执行时存在问题，攻击者可能利用此漏洞提升自己的权限。如果在设置了Trap Flag的情况下出现中断，正确的CPU将执行转移到中断处理器之前会清除Trap Flag。对于受影响的VMware版本，如果内核态IRET设置了Trap Flag的话，则在执行单字节INT 3指令的时候Trap Flag在模式切换后仍继续存在，这造成的结果就是如果能够导致内核通过IRET设置Trap...

VMware VirtualCenter目录遍历漏洞

BUGTRAQ ID: 32172 CVECAN ID: CVE-2008-4281 VirtualCenter是VMware的虚拟服务器管理系统。 VirtualCenter中的目录遍历漏洞可能允许拥有Datastore.FileManagement权限的管理员获得提升的权限。 VMWare ESX 3.5 VMWare ESXi 3.5 VMWare ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://download3.vmware.com/software/vi/ESXe350-200810401-O-UG.zip...

CVE-2008-4281

Directory traversal vulnerability in VMWare ESXi 3.5 before ESXe350-200810401-O-UG and ESX 3.5 before ESX350-200810201-UG allows administrators with the Datastore.FileManagement privilege to gain privileges via unknown vectors...

Denial of service

The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ACE 2.0.x through 2.0.5 and earlier, and 1.0.x through 1.0.7; Server 1.0.x through 1.0.7; ESX 2.5.4 through 3.5; and ESXi 3.5, when running 32-bit and 64-b...

Directory traversal

Directory traversal vulnerability in VMWare ESXi 3.5 before ESXe350-200810401-O-UG and ESX 3.5 before ESX350-200810201-UG allows administrators with the Datastore.FileManagement privilege to gain privileges via unknown vectors...

CVE-2008-4281

Directory traversal vulnerability in VMWare ESXi 3.5 before ESXe350-200810401-O-UG and ESX 3.5 before ESX350-200810201-UG allows administrators with the Datastore.FileManagement privilege to gain privileges via unknown vectors...

CVE-2008-4915

CVE-2008-4915 documents a privilege-escalation flaw in CPU hardware emulation across VMware products (Workstation, Player, Server, ESX/ESXi, and related variants) when running 32/64-bit guest OS. The trap-flag handling flaw allows an authenticated guest OS user to gain privileges on the guest OS....

CVE-2008-4281

CVE-2008-4281 is a VMware directory-traversal vulnerability affecting ESXi 3.5 and ESX 3.5 (before patches ESXe350-200810401-O-UG and ESX350-200810201-UG). Exploitation requires a user with Datastore.FileManagement privileges; the attack vectors are not specified in the provided documents. VMware...

VMSA-2008-0018 VMware Hosted products and patches for ESX and ESXi resolve two security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2008-0018 Synopsis: VMware Hosted products and patches for ESX and ESXi resolve two security issues Issue date: 2008-11-06 Updated on...

VMSA-2008-0018:VMware Hosted products and patches for ESX and ESXi resolve two security issues

VMSA-2008-0018 VMware Hosted products and patches for ESX and ESXi resolve two security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2008-0018 VMware Security Advisory Synopsis: VMware Hosted products and patches for ESX and ESXi resolve two security issues VMware...