DEBIAN-CVE-2011-1681

vmware-hgfsmounter in VMware Open Virtual Machine Tools aka open-vm-tools 8.4.2-261024 and earlier attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to trigger corruption of this file via a process with a small...

CVE-2011-1681

CVE-2011-1681 affects vmware-hgfsmounter in VMware Open Virtual Machine Tools (open-vm-tools) 8.4.2-261024 and earlier. The issue arises when the tool attempts to append to /etc/mtab without first checking whether resource limits would interfere, enabling a local user with a small RLIMIT_FSIZE to...

Oracle VirtualBox Extensions Local Privilege Escalation Vulnerability - Linux

Oracle VirtualBox is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2010-4414

Unspecified vulnerability in Oracle VM VirtualBox 4.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Extensions...

CVE-2010-4414

Unspecified vulnerability in Oracle VM VirtualBox 4.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Extensions...

Design/Logic Flaw

Unspecified vulnerability in Oracle VM VirtualBox 4.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Extensions...

CVE-2010-4414

CVE-2010-4414 concerns Oracle VM VirtualBox Extensions Local Privilege Escalation. OpenVAS/Gentoo GLSA entries tie it to VirtualBox Extensions with local privilege escalation on Linux/Windows, CVSS v2 base 6.8. The Gentoo GLSA 201204-01 and associated advisories recommend upgrading VirtualBox to ...

CVE-2010-4414

Unspecified vulnerability in Oracle VM VirtualBox 4.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Extensions...

kvm security and bug fix update

kvm-83-164.0.1.el55.30 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch to replace RHEL with OEL - Added kvm-Introduce-oel-machine-type.patch so that OEL is a recognized VM kvm-83-164.el55.30 - Revert the bz661397 patches as they are not enough -...

Oracle Virtual Server Agent Command Injection (CVE-2010-3582)

Oracle VM software provides virtualization technology that allows the running of multiple instances of x86 virtual computers simultaneously within the hosting operating system. A command injection vulnerability exists in Oracle VM. The vulnerability is due to an input validation error in proxy...

Oracle Virtual Server Agent Command Injection

Added: 11/26/2010 CVE: CVE-2010-3582 BID: 44031 Background Oracle VM software provides virtualization technology that allows running multiple instances of x86 virtual computers simultaneously within the host operating system. It supports many Oracle and non-Oracle based systems such as Windows,...

Oracle Virtual Server Agent Command Injection

Added: 11/26/2010 CVE: CVE-2010-3582 BID: 44031 Background Oracle VM software provides virtualization technology that allows running multiple instances of x86 virtual computers simultaneously within the host operating system. It supports many Oracle and non-Oracle based systems such as Windows,...

Oracle Virtual Server Agent Command Injection

Added: 11/26/2010 CVE: CVE-2010-3582 BID: 44031 Background Oracle VM software provides virtualization technology that allows running multiple instances of x86 virtual computers simultaneously within the host operating system. It supports many Oracle and non-Oracle based systems such as Windows,...

Oracle Virtual Server Agent Command Injection

Added: 11/26/2010 CVE: CVE-2010-3582 BID: 44031 Background Oracle VM software provides virtualization technology that allows running multiple instances of x86 virtual computers simultaneously within the host operating system. It supports many Oracle and non-Oracle based systems such as Windows,...

[Onapsis Security Advisory 2010-010] Oracle Virtual Server Agent Local Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2010-0010: Oracle Virtual Server Agent Local Privilege Escalation This advisory can be downloaded in PDF format from http://www.onapsis.com/research.html. By downloading this advisory from the Onapsis Resource Center, you wil...

[Onapsis Security Advisory 2010-009] Oracle Virtual Server Agent Remote Command Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2010-0009 : Oracle Virtual Server Agent Remote Command Execution This advisory can be downloaded in PDF format from http://www.onapsis.com/research.html. By downloading this advisory from the Onapsis Resource Center, you will...

[Onapsis Security Advisory 2010-008] Oracle Virtual Server Agent Arbitrary File Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2010-0008 : Oracle Virtual Server Agent Arbitrary File Access This advisory can be downloaded in PDF format from http://www.onapsis.com/research.html. By downloading this advisory from the Onapsis Resource Center, you will ga...

CVE-2010-3988

Unspecified vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to bypass intended access restrictions and cause a denial of service via unknown vectors...

CVE-2010-3987

CVE-2010-3987 affects HP Insight Control Virtual Machine Management before version 6.2. The vulnerability is a remote XSS via unspecified vectors, with impact stated as I:P, no confidentiality or availability loss, and no user authentication required. HP’s security bulletin HPSBMA02598 rev.2 indi...

Ubuntu: Security Advisory (USN-1008-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...