CVE-2013-1212: Undefined Security Weakness

The SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof servers, and intercept or modify Virtual Supervisor Module VSM to VMware vCenter communication, via a crafted certificate, aka Bug ID CSCud14837...

PT-2013-4135

Name of the Vulnerable Software and Affected Versions VMware vCenter Server Appliance vCSA version 5.1 before Update 1 Description The issue allows remote authenticated users to execute arbitrary programs with root privileges by leveraging Virtual Appliance Management Interface VAMI access...

PT-2013-4136

Name of the Vulnerable Software and Affected Versions VMware vCenter Server Appliance vCSA versions 5.1 before Update 1 Description The issue allows remote authenticated users to create or overwrite arbitrary files, and consequently execute arbitrary code or cause a denial of service. This is...

CVE-2013-3107: Undefined Security Weakness

VMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is enabled, allows remote attackers to bypass authentication by providing a valid username in conjunction with an empty password...

CVE-2013-3080: Undefined Security Weakness

VMware vCenter Server Appliance vCSA 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary files, and consequently execute arbitrary code or cause a denial of service, by leveraging Virtual Appliance Management Interface VAMI web-interface access...

CVE-2013-3079: Improper Control of Generation of Code

VMware vCenter Server Appliance vCSA 5.1 before Update 1 allows remote authenticated users to execute arbitrary programs with root privileges by leveraging Virtual Appliance Management Interface VAMI access...

PT-2013-4139

Name of the Vulnerable Software and Affected Versions VMware vCenter Server version 5.1 before Update 1 Description The issue allows remote attackers to bypass authentication by providing a valid username in conjunction with an empty password when anonymous LDAP binding for Active Directory is...

VMware vCenter/vSphere Compliance Checks

Binary data vmwarecompliancecheck.nbin...

VMware vCenter Server Denial of Service (VMSA-2012-0018)

The version of VMware vCenter installed on the remote host is 4.1 before update 3 or 5.0 before Update 2. Such versions are potentially affected by a denial of service vulnerability due to an issue in webservice logging. By exploiting this flaw, a remote, unauthenticated attacker could crash the...

CVE-2013-1659

VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 do not properly implement the Network File Copy NFC protocol, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of...

CVE-2012-6326: Improper Restriction of Operations within the Bounds of a Memory Buffer

VMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2, and vCSA 5.0 before Update 2, allows remote attackers to cause a denial of service disk consumption via vectors that trigger large log entries...

CVE-2013-1659: Undefined Security Weakness

VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 do not properly implement the Network File Copy NFC protocol, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of...

PT-2013-3300

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 4.0 through 4.0 Update 4a VMware vCenter Server versions 5.0 through 5.0 Update 1 VMware vCenter Server versions 5.1 through 5.1.0a VMware ESXi versions 3.5 through 5.1 VMware ESX versions 3.5 through 4.1...

PT-2013-1924

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 4.1 before Update 3 VMware vCenter Server versions 5.0 before Update 2 VMware vCSA versions 5.0 before Update 2 Description The issue allows remote attackers to cause a denial of service, specifically disk...

CVE-2013-1405: Improper Authentication

VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 before Update 3a, VMware VI-Client 2.5, VMware ESXi 3.5 through 4.1, and VMware ESX 3.5 through 4.1 do not properly implement the management...

PT-2013-3130

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 4.0 through 4.1 before Update 3a VMware VirtualCenter version 2.5 VMware vSphere Client versions 4.0 through 4.1 before Update 3a VMware VI-Client version 2.5 VMware ESXi versions 3.5 through 4.1 VMware ESX...

CVE-2012-6325

VMware vCenter Server Appliance vCSA 5.0 before Update 2 does not properly parse XML documents, which allows remote authenticated users to read arbitrary files via unspecified vectors...

PT-2012-6265

Name of the Vulnerable Software and Affected Versions VMware vCenter Server Appliance vCSA versions 5.0 before Update 2 Description The issue is related to improper parsing of XML documents, allowing remote authenticated users to read arbitrary files. Recommendations For versions 5.0 before Updat...

CVE-2012-6324: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in VMware vCenter Server Appliance vCSA 5.0 before Update 2 and 5.1 before Patch 1 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2012-6325: Exposure of Sensitive Information to an Unauthorized Actor

VMware vCenter Server Appliance vCSA 5.0 before Update 2 does not properly parse XML documents, which allows remote authenticated users to read arbitrary files via unspecified vectors...