VMware ESX多个信息泄露漏洞

VMWare ESX Server是一款虚拟主机的服务程序。 VMWare ESX Server存在多个安全问题，远程攻击者可以利用漏洞获得敏感信息。 VMWare ESX Server包含的管理接口是传统的WEB应用程序，使用的会话ID包含在两个COOKIE中（vmware.mui.kid和vmware.mui.sid），这会话ID格式包含BASE64编码的用户帐户和密码，如果攻击者可以通过其他机制访问COOKIE，就可以获得验证信息。 另外管理接口还提供更改密码的功能，通过HTML表单，用户需要输入和确定新的密码，如更改ROOT用户的密码为"test"，就需要如下请求：...

Linux Kernel共享内存绕过安全限制漏洞

Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel实现上存在漏洞，允许本地用户绕过IPC权限控制，可能导致内存信息泄露。 通过使用mprotect可以获得以只读方式attach的共享内存的写权限。 Linux kernel 2.6.16 Linux kernel 2.4.x VMWare ESX Server 2.5.4 VMWare ESX Server 2.5.3 VMWare ESX Server 2.1.3 VMWare ESX Server 2.0.2 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0008 Synopsis: VMware ESX Server 2.0.2 Upgrade Patch 2 Patch URL: http://www.vmware.com/download/esx/esx-202-200610-patch.html...

VMSA-2006-0005 - VMware ESX Server 2.5.4 Upgrade Patch 1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0005 Synopsis: VMware ESX Server 2.5.4 Upgrade Patch 1 Patch URL: http://www.vmware.com/download/esx/esx-254-200610-patch.html...

VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0007 Synopsis: VMware ESX Server 2.1.3 Upgrade Patch 2 Patch URL: http://www.vmware.com/download/esx/esx-213-200610-patch.html...

VMWare ESX Server multiple security vulnerabilities

Invalid AMD fxsave/restore instructions handling. Vulnerabilities in embedded packages...

VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0006 Synopsis: VMware ESX Server 2.5.3 Upgrade Patch 4 Patch URL: http://www.vmware.com/download/esx/esx-253-200610-patch.html...

VMware ESX多个敏感信息泄露漏洞

VMware ESX Server是一个适用于任何系统环境的企业级虚拟计算机软件。 VMware ESX Server的管理界面使用了两个Cookies（vmware.mui.kid和vmware.mui.sid）中的会话ID。会话ID格式是私有的，包含有简单base64编码格式的用户帐号和口令。如果攻击者可以通过任何机制（如跨站脚本攻击）访问了Cookies的话，就可以获取认证凭据。 VMware ESX Server的管理界面允许用户更改口令。如果是root用户的话，还可以更改其他用户的口令。在更改口令时，会通过一个HTML表单要求用户输入并确认新的口令，然后通过HTTP...

Corsaire Security Advisory - VMware ESX Server Password Disclosure in Log issue

-- Corsaire Security Advisory -- Title: VMware ESX Server Password Disclosure in Log issue Date: 14.11.05 Application: VMware ESX prior to 2.5.3 upgrade patch 2 VMware ESX prior to 2.1.3 upgrade patch 1 VMware ESX prior to 2.0.2 upgrade patch 1 Environment: VMware ESX Author: Stephen de Vries...

Corsaire Security Advisory - VMware ESX Server Password Disclosure in Cookie issue

-- Corsaire Security Advisory -- Title: VMware ESX Server Password Disclosure in Cookie issue Date: 12.05.06 Application: VMware ESX prior to 2.5.2 patch 4 VMware ESX prior to 2.0.2 Environment: VMware ESX Author: Martin O'Neal [email protected] Audience: General distribution Reference:...

VMSA-2006-0004 Cross site scripting vulnerability and other fixes

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0004 Synopsis: Cross site scripting vulnerability and other fixes Knowledge base URL:http://kb.vmware.com/kb/2118366 Issue date:...

CVE-2005-3618

Cross-site request forgery CSRF vulnerability in the management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 allows allows remote attackers to perform unauthorized actions as the administrator via URLs, as demonstrated using...

CVE-2005-3618

CVE-2005-3618 describes a CSRF vulnerability in VMware ESX Server’s Management Interface that can let an attacker modify a known user’s password via a crafted URL. Affected products/versions include ESX Server 2.0.x prior to 2.0.2 patch 1, 2.1.x prior to 2.1.3 patch 1, and 2.x prior to 2.5.3 patc...

VMware ESX 2.x - Multiple Information Disclosure Vulnerabilities

VMware ESX 2.x - Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/19249/info VMware ESX is prone to multiple information-disclosure vulnerabilities. These issues are due to a design error in the application. The following issues were reported: 1. An...

CVE-2005-3619

Cross-site scripting XSS vulnerability in the management interface for VMware ESX 2.5.x before 2.5.2 upgrade patch 2, 2.1.x before 2.1.2 upgrade patch 6, and 2.0.x before 2.0.1 upgrade patch 6 allows remote attackers to inject arbitrary web script or HTML via messages that are not sanitized when...

CVE-2005-3619

CVE-2005-3619 affects VMware ESX Server management interface. The issue is a cross-site scripting (XSS) vulnerability in the web-based syslog viewer, where messages displayed without proper sanitization can inject arbitrary script/HTML. Affected versions include ESX 2.5.x prior to 2.5.2 upgrade p...

CVE-2005-4773

The configuration of VMware ESX Server 2.x, 2.0.x, 2.1.x, and 2.5.x allows local users to cause a denial of service shutdown via the 1 halt, 2 poweroff, and 3 reboot scripts executed at the service console...

CVE-2003-1291

VMware ESX Server 1.5.2 before Patch 4 allows local users to execute arbitrary programs as root via certain modified VMware ESX Server environment variables...

CVE-2005-3619

Cross-site scripting XSS vulnerability in the management interface for VMware ESX 2.5.x before 2.5.2 upgrade patch 2, 2.1.x before 2.1.2 upgrade patch 6, and 2.0.x before 2.0.1 upgrade patch 6 allows remote attackers to inject arbitrary web script or HTML via messages that are not sanitized when...

CVE-2005-3620

The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 records passwords in cleartext in URLs that are stored in world-readable web server log files, which allows local users to gain privileges...