315 matches found
VMware Workstation 'vmrun' Library Path Privilege Escalation Vulnerability (VMSA-2011-0006) - Linux
VMware Workstation is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
VMware Releases Security Advisory VMSA-2010-0018
VMware has released security advisory VMSA-2010-0018 to address multiple vulnerabilities affecting VMware Workstation, Player, Fusion, ESXi, and ESX. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code or operate with elevated privileges. US-CERT encourages users...
VMSA-2010-0010 : ESX 3.5 third-party update for Service Console kernel
a. Service Console update for COS kernel The service console package kernel is updated to version 2.4.21-63. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2008-5029, CVE-2008-5300, CVE-2009-1337, CVE-2009-1385, CVE-2009-1895, CVE-2009-2848, CVE-2009-300...
VMware Products 'vmware-vmx' Information Disclosure Vulnerability (Linux)
The host is installed with VMWare products and are prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbvmwareprdtsvmxinfodiscvulnlin.nasl 5388 2017-02-21 15:13:30Z teissa $ VMware Products 'vmware-vmx' Information Disclosure Vulnerability Linux Authors: Antu Sanadi...
VMware Remote Console e.x.p build-158248 - Format String
DSECRG-09-053 VMware Remote Console - format string vulnerability http://www.dsecrg.com/pages/vul/show.php?id=153 VMrc vulnerable to format string attacks. Exploitation of this issue may lead to arbitrary code execution on the system where VMrc is installed. Digital Security Research Group DSecRG...
VMware ESX WebAccess Context Data XSS (VMSA-2010-0005)
The version of WebAccess hosted on the remote VMware ESX server has a cross-site scripting vulnerability. It is possible to specify which XML web service to use for a given session by passing a specially crafted value to the 'view' parameter of '/ui/vmDirect.do'. A remote attacker could exploit...
VMware Releases Security Advisory for ESX Service Console Updates
VMware has released a security advisory to address vulnerabilities in the Samba and acpid packages of ESX Service Console. These vulnerabilities may allow an attacker to cause a denial-of-service condition, obtain sensitive information or bypass security restrictions. US-CERT encourages users and...
VMSA-2010-0002 : VMware vCenter update release addresses multiple security issues in Java JRE
a. Java JRE Security Update JRE update to version 1.5.022, which addresses multiple security issues that existed in earlier releases of JRE. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the following names to the security issues fixed in JRE 1.5.018: CVE-2009-1093,...
VMware Host Agent Directory Traversal (VMSA-2009-0015)
The version of VMware Host Agent hostd running on the remote host has a directory traversal vulnerability. The affected service runs as root. VMware ESX, VMware ESXi, and VMware Server on Linux are affected. A remote attacker could exploit this to read arbitrary files, including guest VMs, from t...
VMware Fusion < 2.0.6 (VMSA-2009-0013)
The version of VMware Fusion installed on the Mac OS X host is earlier than 2.0.6. Such versions are affected by two security issues : - A vulnerability in the vmx86 kernel extension allows an unprivileged userland program to initialize several function pointers via the '0x802E564A' IOCTL code,...
VMSA-2009-0003 : ESX 2.5.5 patch 12 updates service console package ed
a. Updated ESX patch updates Service Console package ed ed is a line-oriented text editor, used to create, display, and modify text files both interactively and via shell scripts. A heap-based buffer overflow was discovered in the way ed, the GNU line editor, processed long file names. An attacke...
VMWare VMSA-2009-0005更新修复多个安全漏洞
BUGTRAQ ID: 34373 CVECAN ID: CVE-2008-4916,CVE-2008-3761,CVE-2009-1146,CVE-2009-1147,CVE-2009-0910,CVE-2009-0909,CVE-2009-0908,CVE-2009-0177,CVE-2009-0518 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMWare的VMSA-2009-0005更新修复了多个安全漏洞，本地或远程攻击者可以利用这些漏洞绕过某些安全限制、获得权限提升或导致拒绝服务。 1 如果远程攻击者在TCP...
VMSA-2009-0005 VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2009-0005 Synopsis: VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues Issue date:...
TPTI-09-01: VMWare VMnc Codec Invalid RFB Message Type Heap Overflow
TPTI-09-01: VMWare VMnc Codec Invalid RFB Message Type Heap Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-09-01 April 6, 2009 -- CVE ID: CVE-2009-0909 -- Affected Vendors: VMWare, Inc. -- Affected Products: VMWare, Inc. VMWare Player VMWare, Inc. VMWare Workstation VMWare,...
VMware宿主产品VMSA-2009-0005多个远程漏洞
BUGTRAQ ID: 34373 CVE ID：CVE-2008-4916 CVE-2008-3761 CVE-2009-1146 CVE-2009-1147 CVE-2009-0910 CVE-2009-0909 CVE-2009-0908 CVE-2009-0177 CVE-2009-0518 CNCVE ID：CNCVE-20084916 CNCVE-20083761 CNCVE-20091146 CNCVE-20091147 CNCVE-20090910 CNCVE-20090909 CNCVE-20090908 CNCVE-20090177 CNCVE-20090518...