VMSA-2010-0020:VMware ESXi 4.1 Update Installer SFCB Authentication Flaw

VMSA-2010-0020.1 VMware ESXi 4.1 Update Installer SFCB Authentication Flaw VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0020.1 VMware Security Advisory Synopsis: VMware ESXi 4.1 Update Installer SFCB Authentication Flaw VMware Security Advisory Issue date: 2010-12-21...

CVE-2010-4297: Improper Input Validation

The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x before 2.5.5 build 328052 and 3.1.x before 3.1.2 build 301548; VMware Server 2.0.2; VMware Fusion 2.x before 2.0.8 build 328035 and 3.1.x before 3.1.2...

CVE-2010-1141

CVE-2010-1141 affects VMware Tools and related VMware host components (Workstation, Player, ACE, Server, Fusion, ESXi/ESX). The flaw is improper access/loading of libraries, enabling a user-assisted remote attacker to trigger arbitrary code execution by convincing a Windows guest OS user to click...

CVE-2010-1141: Undefined Security Weakness

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.x before 2.0.6 build 246742; VMware ESXi 3.5 and 4.0; and VMware ESX 2.5.5,...

CVE-2010-1142: Undefined Security Weakness

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.x before 2.0.6 build 246742; VMware ESXi 3.5 and 4.0; and VMware ESX 2.5.5,...

CVE-2009-3733

A directory traversal vulnerability in the VMware Host Agent (hostd) service allows remote attackers to read arbitrary files from the host system. This flaw affects VMware Server 1.x (before 1.0.10 build 203137), 2.x (before 2.0.2 build 203138) on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and ...

CVE-2009-2267: Undefined Security Weakness

VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138, VMware Fusion 2.x before 2.0.6 build 196839, VMware ESXi 3.5 and 4.0, and...

CVE-2009-3733: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors...

PT-2009-4703

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 6.5.x through 6.5.3 build 185404 VMware Player versions 2.5.x through 2.5.3 build 185404 VMware ACE versions 2.5.x through 2.5.3 build 185404 VMware Server versions 1.x through 1.0.10 build 203137 VMware Server...

PT-2009-5987 · Vmware · Vmware Esxi +1

Name of the Vulnerable Software and Affected Versions: VMware Server versions 1.x through 1.0.9 and 2.x through 2.0.1 VMware ESXi version 3.5 VMware ESX versions 3.0.3 and 3.5 Description: A directory traversal issue allows remote attackers to read arbitrary files via unspecified vectors...

VMware PF异常本地权限提升漏洞

BUGTRAQ ID: 36841 CVECAN ID: CVE-2009-2267 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 在受保护的模式中，cpl通常等于cs寄存器最不重要的两位，但也有一个例外：在Virtual-8086模式中，无论cs寄存器为何值cpl总是为 3（最少权限）。当处理器出现PF异常时，会向包含有标记的栈上Push一个异常代码，操作系统使用这个标记确定正确地操作阶段。其中的一个标记为 U/S（user/supervisor），当处理器处于用户态时出现错误会设置这个标记。...

VMware Virtual 8086 - Linux Local Ring0

Bugtraq ID: 36841 Class: Design Error Published: Oct 27 2009 12:00AM Updated: Oct 27 2009 09:18PM Credit: Tavis Ormandy and Julien Tinnes of the Google Security Team Vulnerable: VMWare Workstation 6.5.3 VMWare Workstation 6.5.2 build 156735 VMWare Workstation 6.5.2 VMWare Workstation 6.5.1 VMWare...

CVE-2009-1805: Undefined Security Weakness

Unspecified vulnerability in the VMware Descheduled Time Accounting driver in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745, VMware Fusion 2.x before 2.0.2 build...

CVE-2009-1244: Undefined Security Weakness

Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745; VMware Fusion before 2.0.4 build 159196; VMware...

VMware宿主产品VMSA-2009-0005多个远程漏洞

BUGTRAQ ID: 34373 CVE ID：CVE-2008-4916 CVE-2008-3761 CVE-2009-1146 CVE-2009-1147 CVE-2009-0910 CVE-2009-0909 CVE-2009-0908 CVE-2009-0177 CVE-2009-0518 CNCVE ID：CNCVE-20084916 CNCVE-20083761 CNCVE-20091146 CNCVE-20091147 CNCVE-20090910 CNCVE-20090909 CNCVE-20090908 CNCVE-20090177 CNCVE-20090518...

CVE-2008-4916: Undefined Security Weakness

Unspecified vulnerability in a guest virtual device driver in VMware Workstation before 5.5.9 build 126128, and 6.5.1 and earlier 6.x versions; VMware Player before 1.0.9 build 126128, and 2.5.1 and earlier 2.x versions; VMware ACE before 1.0.8 build 125922, and 2.5.1 and earlier 2.x versions;...

CVE-2009-0518: Exposure of Sensitive Information to an Unauthorized Actor

VI Client in VMware VirtualCenter before 2.5 Update 4, VMware ESXi 3.5 before Update 4, and VMware ESX 3.5 before Update 4 retains the VirtualCenter Server password in process memory, which might allow local users to obtain this password...

CVE-2008-4914

Unspecified vulnerability in VMware ESXi 3.5 before ESXe350-200901401-I-SG and ESX 3.5 before ESX350-200901401-SG allows local administrators to cause a denial of service host crash via a snapshot with a malformed VMDK delta disk...

CVE-2008-4914

Unspecified vulnerability in VMware ESXi 3.5 before ESXe350-200901401-I-SG and ESX 3.5 before ESX350-200901401-SG allows local administrators to cause a denial of service host crash via a snapshot with a malformed VMDK delta disk...

CVE-2008-4914: Undefined Security Weakness

Unspecified vulnerability in VMware ESXi 3.5 before ESXe350-200901401-I-SG and ESX 3.5 before ESX350-200901401-SG allows local administrators to cause a denial of service host crash via a snapshot with a malformed VMDK delta disk...