VMSA-2009-0006 : VMware Hosted products and patches for ESX and ESXi resolve a critical security vulnerability

a. Host code execution vulnerability from a guest operating system A critical vulnerability in the virtual machine display function might allow a guest operating system to run code on the host. This issue is different from the vulnerability in a guest virtual device driver reported in VMware...

VMSA-2008-0019 : VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2

a. Critical Memory corruption vulnerability A memory corruption condition may occur in the virtual machine hardware. A malicious request sent from the guest operating system to the virtual hardware may cause the virtual hardware to write to uncontrolled physical memory. VMware would like to thank...

VMSA-2008-0018 : VMware Hosted products and patches for ESX and ESXi resolve two security issues

a. A privilege escalation on 32-bit and 64-bit guest operating systems VMware products emulate hardware functions and create the possibility to run guest operating systems. A flaw in the CPU hardware emulation might allow the virtual CPU to incorrectly handle the Trap flag. Exploitation of this...

CVE-2009-1805

Unspecified vulnerability in the VMware Descheduled Time Accounting driver in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745, VMware Fusion 2.x before 2.0.2 build...

VMSA-2009-0007 VMware Hosted products and ESX and ESXi patches resolve security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2009-0007 Synopsis: VMware Hosted products and ESX and ESXi patches resolve security issues Issue date: 2009-05-28 Updated on:...

VMSA-2009-0006 VMware Hosted products and patches for ESX and ESXi resolve a critical security vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2009-0006 Synopsis: VMware Hosted products and patches for ESX and ESXi resolve a critical security vulnerability Issue date:...

VMSA-2009-0006:VMware Hosted products and patches for ESX and ESXi resolve a CRITICAL security vulnerability

VMSA-2009-0006 VMware Hosted products and patches for ESX and ESXi resolve a critical security vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0006 VMware Security Advisory Synopsis: VMware Hosted products and patches for ESX and ESXi resolve a critical...

VMSA-2009-0005 VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2009-0005 Synopsis: VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues Issue date:...

VMware宿主产品VMSA-2009-0005多个远程漏洞

BUGTRAQ ID: 34373 CVE ID：CVE-2008-4916 CVE-2008-3761 CVE-2009-1146 CVE-2009-1147 CVE-2009-0910 CVE-2009-0909 CVE-2009-0908 CVE-2009-0177 CVE-2009-0518 CNCVE ID：CNCVE-20084916 CNCVE-20083761 CNCVE-20091146 CNCVE-20091147 CNCVE-20090910 CNCVE-20090909 CNCVE-20090908 CNCVE-20090177 CNCVE-20090518...

CVE-2008-4916

CVE-2008-4916 describes a denial-of-service vulnerability in the guest virtual device driver that could crash the host OS. The issue affects VMware products including VMware Workstation (pre-5.5.9/6.x), VMware Player (pre-1.0.9/2.x), VMware ACE (pre-1.0.8/2.x), VMware Server (1.x before 1.0.8/2.0...

CVE-2009-0518

CVE-2009-0518 describes a vulnerability where the VirtualCenter Server password may be retained in the memory of VI Client on VMware products. Affected: VI Client, VirtualCenter Server in VMware VirtualCenter prior to 2.5 Update 4, ESXi 3.5 prior to Update 4, and ESX 3.5 prior to Update 4. Impact...

CVE-2008-4914

Unspecified vulnerability in VMware ESXi 3.5 before ESXe350-200901401-I-SG and ESX 3.5 before ESX350-200901401-SG allows local administrators to cause a denial of service host crash via a snapshot with a malformed VMDK delta disk...

Security feature bypass

Unspecified vulnerability in VMware ESXi 3.5 before ESXe350-200901401-I-SG and ESX 3.5 before ESX350-200901401-SG allows local administrators to cause a denial of service host crash via a snapshot with a malformed VMDK delta disk...

CVE-2008-4914

Unspecified vulnerability in VMware ESXi 3.5 before ESXe350-200901401-I-SG and ESX 3.5 before ESX350-200901401-SG allows local administrators to cause a denial of service host crash via a snapshot with a malformed VMDK delta disk...

CVE-2008-4914

The CVE-2008-4914 issue affects VMware ESXi 3.5 (before ESXe350-200901401-I-SG) and ESX 3.5 (before ESX350-200901401-SG). Root cause: a malformed VMDK delta disk in a snapshot can be loaded by the host, potentially causing a denial of service via a host crash. VMware’s advisories indicate the vul...

VMSA-2008-0019 VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2008-0019 Synopsis: VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2 Issue dat...

VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2

a. Critical Memory corruption vulnerabilityA memory corruption condition may occur in the virtual machinehardware. A malicious request sent from the guest operatingsystem to the virtual hardware may cause the virtual hardware towrite to uncontrolled physical memory.VMware would like to thank Andr...

VMSA-2008-0019:VMware Hosted products and patches for ESX and ESXi resolve a CRITICAL security issue and update bzip2

VMSA-2008-0019.1 VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2 VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2008-0019.1 VMware Security Advisory Synopsis: VMware Hosted products and patches for ESX and ESXi resolve a...

VMware VirtualCenter目录遍历漏洞

BUGTRAQ ID: 32172 CVECAN ID: CVE-2008-4281 VirtualCenter是VMware的虚拟服务器管理系统。 VirtualCenter中的目录遍历漏洞可能允许拥有Datastore.FileManagement权限的管理员获得提升的权限。 VMWare ESX 3.5 VMWare ESXi 3.5 VMWare ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://download3.vmware.com/software/vi/ESXe350-200810401-O-UG.zip...

VMware产品Trap Flag处理本地权限提升漏洞

BUGTRAQ ID: 32168 CVECAN ID: CVE-2008-4915 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMWare在处理指令的执行时存在问题，攻击者可能利用此漏洞提升自己的权限。如果在设置了Trap Flag的情况下出现中断，正确的CPU将执行转移到中断处理器之前会清除Trap Flag。对于受影响的VMware版本，如果内核态IRET设置了Trap Flag的话，则在执行单字节INT 3指令的时候Trap Flag在模式切换后仍继续存在，这造成的结果就是如果能够导致内核通过IRET设置Trap...