CVE-2011-3571

Technical details for CVE-2011-3571 are not provided in the supplied documents. The entry notes confusion with a reassigned CVE (CVE-2012-0507). Monitor for updates from the referenced advisories; no product/version/vulnerability specifics are disclosed here.

Vanguard Defense Industries (VDI) Hacked for #Antisec Operation

Vanguard Defense Industries VDI Hacked for Antisec Operation AntiSec is targeting defense contractors again. Continuing their beef with law enforcement, and organizations that offer them support, they have targeted Richard Garcia, the Senior Vice President of Vanguard Defense Industries VDI...

Format string

libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted 1 qcow2, 2 VMDK, or 3 VDI header, related to lack of support for a dis...

CVE-2009-3923

The CVE-2009-3923 entry concerns VirtualBox 2.0.8/2.0.10 web service within Sun Virtual Desktop Infrastructure (VDI) 3.0 that does not require authentication. This allows remote attackers to obtain unspecified access through Apache HTTP Server–related request vectors. Relevant data from the conne...

CVE-2009-3923: Improper Authentication

The VirtualBox 2.0.8 and 2.0.10 web service in Sun Virtual Desktop Infrastructure VDI 3.0 does not require authentication, which allows remote attackers to obtain unspecified access via vectors involving requests to an Apache HTTP Server...

Sun Solaris虚拟桌面架构不安全LDAP漏洞

Sun Solaris是一款流行的Unix操作系统。 Sun Solaris虚拟桌面架构VDI针对LDAP连接的安全加强实现存在安全错误，远程攻击者可以利用漏洞触发系统使用不加密连接，泄漏针对VDI配置数据的LDAP请求。 目前没有详细漏洞细节提供。 Sun Solaris 10 厂商解决方案 用户可联系供应商获得如下补丁： -- SPARC平台 -- Sun VDI Software 3.0 for Solaris 10: 采用补丁141481-02及之后版本. -- x86 Platform -- Sun VDI Software 3.0 for Solaris 10:...

CVE-2009-2856

Sun Virtual Desktop Infrastructure VDI 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection, which might allow remote attackers to read cleartext VDI configuration-data requests by sniffing LDAP sessions on the...

Design/Logic Flaw

Sun Virtual Desktop Infrastructure VDI 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection, which might allow remote attackers to read cleartext VDI configuration-data requests by sniffing LDAP sessions on the...

CVE-2009-2856

Sun Virtual Desktop Infrastructure VDI 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection, which might allow remote attackers to read cleartext VDI configuration-data requests by sniffing LDAP sessions on the...

CVE-2009-2856

Sun Virtual Desktop Infrastructure (VDI) 3.0 is affected when anonymous binding is enabled. The issue arises because the client’s attempt to establish an authenticated and encrypted connection is not properly handled, which might allow remote attackers to read cleartext VDI configuration‑data req...

CVE-2009-2856: Exposure of Sensitive Information to an Unauthorized Actor

Sun Virtual Desktop Infrastructure VDI 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection, which might allow remote attackers to read cleartext VDI configuration-data requests by sniffing LDAP sessions on the...