PT-2013-4139

Name of the Vulnerable Software and Affected Versions VMware vCenter Server version 5.1 before Update 1 Description The issue allows remote attackers to bypass authentication by providing a valid username in conjunction with an empty password when anonymous LDAP binding for Active Directory is...

CVE-2012-6326: Improper Restriction of Operations within the Bounds of a Memory Buffer

VMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2, and vCSA 5.0 before Update 2, allows remote attackers to cause a denial of service disk consumption via vectors that trigger large log entries...

CVE-2013-1659: Undefined Security Weakness

VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 do not properly implement the Network File Copy NFC protocol, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of...

PT-2013-1924

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 4.1 before Update 3 VMware vCenter Server versions 5.0 before Update 2 VMware vCSA versions 5.0 before Update 2 Description The issue allows remote attackers to cause a denial of service, specifically disk...

PT-2013-3300

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 4.0 through 4.0 Update 4a VMware vCenter Server versions 5.0 through 5.0 Update 1 VMware vCenter Server versions 5.1 through 5.1.0a VMware ESXi versions 3.5 through 5.1 VMware ESX versions 3.5 through 4.1...

CVE-2013-1405: Improper Authentication

VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 before Update 3a, VMware VI-Client 2.5, VMware ESXi 3.5 through 4.1, and VMware ESX 3.5 through 4.1 do not properly implement the management...

PT-2013-3130

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 4.0 through 4.1 before Update 3a VMware VirtualCenter version 2.5 VMware vSphere Client versions 4.0 through 4.1 before Update 3a VMware VI-Client version 2.5 VMware ESXi versions 3.5 through 4.1 VMware ESX...

CVE-2012-6325

VMware vCenter Server Appliance vCSA 5.0 before Update 2 does not properly parse XML documents, which allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2012-6324: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in VMware vCenter Server Appliance vCSA 5.0 before Update 2 and 5.1 before Patch 1 allows remote authenticated users to read arbitrary files via unspecified vectors...

PT-2012-6264

Name of the Vulnerable Software and Affected Versions VMware vCenter Server Appliance vCSA versions 5.0 before Update 2 VMware vCenter Server Appliance vCSA versions 5.1 before Patch 1 Description A directory traversal issue allows remote authenticated users to read arbitrary files via unspecifie...

PT-2012-6265

Name of the Vulnerable Software and Affected Versions VMware vCenter Server Appliance vCSA versions 5.0 before Update 2 Description The issue is related to improper parsing of XML documents, allowing remote authenticated users to read arbitrary files. Recommendations For versions 5.0 before Updat...

CVE-2012-6325: Exposure of Sensitive Information to an Unauthorized Actor

VMware vCenter Server Appliance vCSA 5.0 before Update 2 does not properly parse XML documents, which allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2011-1788

vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1 allows local users to discover the SOAP session ID via unspecified vectors...

CVE-2011-0426: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, and VMware VirtualCenter 2.5 before Update 6a, allows remote attackers to read arbitrary files via unspecified vectors...

PT-2011-1384

Name of the Vulnerable Software and Affected Versions VMware vCenter Server version 4.1 before Update 1 Description The issue concerns the storage of log-on credentials in a configuration file by the vCenter Tomcat Management Application. This allows local users to gain privileges by reading the...

CVE-2010-2928: Undefined Security Weakness

The vCenter Tomcat Management Application in VMware vCenter Server 4.1 before Update 1 stores log-on credentials in a configuration file, which allows local users to gain privileges by reading this file...

VMSA-2011-0003 : Third-party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX

a. vCenter Server and vCenter Update Manager update Microsoft SQL Server 2005 Express Edition to Service Pack 3 Microsoft SQL Server 2005 Express Edition SQL Express distributed with vCenter Server 4.1 Update 1 and vCenter Update Manager 4.1 Update 1 is upgraded from SQL Express Service Pack 2 to...