VMware vSphere Replication Multiple OpenSSL Vulnerabilities (VMSA-2014-0006)

The VMware vSphere Replication installed on the remote host is version 5.5.x prior to 5.5.1.1, or else it is version 5.6.x. It is, therefore, affected by the following OpenSSL related vulnerabilities : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into oth...

VMSA-2014-0008:VMware vSphere product updates to third party libraries

VMSA-2014-0008.2 VMware vSphere product updates to third party libraries VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2014-0008.2 VMware Security Advisory Synopsis: VMware vSphere product updates to third party libraries VMware Security Advisory Issue date: 2014-09-09 VMwar...

VMware vSphere Client Multiple Vulnerabilities (VMSA-2014-0006)

The version of vSphere Client installed on the remote Windows host is is affected by the following vulnerabilities in the OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other sessions or allow denial of service attacks. Note this issu...

vSphere Client任意文件下载漏洞

Bugtraq ID:66772 CVE ID:CVE-2014-1209 VMware vCenter是VMware vSphere套件中一个强大的主机和虚拟机集中管理组件。 VMware vSphere Client 4.0, 4.1, 5.0 Update 3之前版本, 5.1 Update 2之前版本没有正确验证Client文件的更新，这可使远程攻击者触发任意程序的下载和执行。 0 VMWare vSphere Client 5.x VMWare vSphere Client 4.x 目前厂商已经发布了升级补丁以修复漏洞，请下载使用：...

CVE-2014-1209

VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 are affected by CVE-2014-1209 due to improper validation of updates to Client files, which could allow a remote attacker to trigger the downloading and execution of an arbitrary program via unspecified vectors. Several c...

CVE-2014-1209: Improper Input Validation

VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution of an arbitrary program via unspecified vectors...

PT-2014-4014

Name of the Vulnerable Software and Affected Versions VMware vSphere Client versions 4.0 through 5.1 before Update 2 Description The issue is related to improper validation of updates to Client files, allowing remote attackers to trigger the downloading and execution of an arbitrary program...

PT-2014-4015

Name of the Vulnerable Software and Affected Versions VMware vSphere Client versions 5.0 before Update 3 VMware vSphere Client versions 5.1 before Update 2 Description The issue is related to the improper validation of X.509 certificates, which can be exploited by man-in-the-middle attackers to...

CVE-2014-1210: Undefined Security Weakness

VMware vSphere Client 5.0 before Update 3 and 5.1 before Update 2 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate...

KLA10436 Multiple vulnerabilities in VMware vSphere Client

Multiple critical vulnerabilities have been found in VMware vSphere. Malicious users can exploit these vulnerabilities to execute arbitrary code or bypass security. Below is a complete list of vulnerabilities 1. An improper client file update validation can be exploited remotely; 2. An improper...

VMSA-2014-0002 : VMware vSphere updates to third-party libraries

a. DDoS vulnerability in NTP third-party libraries The NTP daemon has a DDoS vulnerability in the handling of the 'monlist' command. An attacker may send a forged request to a vulnerable NTP server resulting in an amplified response to the intended target of the DDoS attack. Mitigation Mitigation...

VMSA-2014-0002:VMware vSphere updates to third party libraries

VMSA-2014-0002.4 VMware vSphere updates to third party libraries VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2014-0002.4 VMware Security Advisory Synopsis: VMware vSphere updates to third party libraries VMware Security Advisory Issue date: 2014-03-11 VMware Security...

CVE-2013-5556

The license-installation module on the Cisco Nexus 1000V switch 4.21SV15.2b and earlier for VMware vSphere, Cisco Nexus 1000V switch 5.21SM15.1 for Microsoft Hyper-V, and Cisco Virtual Security Gateway 4.21VSG11 for Nexus 1000V switches allows local users to gain privileges and execute arbitrary...

CVE-2013-5556

The license-installation module on the Cisco Nexus 1000V switch 4.21SV15.2b and earlier for VMware vSphere, Cisco Nexus 1000V switch 5.21SM15.1 for Microsoft Hyper-V, and Cisco Virtual Security Gateway 4.21VSG11 for Nexus 1000V switches allows local users to gain privileges and execute arbitrary...

PT-2013-3130

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 4.0 through 4.1 before Update 3a VMware VirtualCenter version 2.5 VMware vSphere Client versions 4.0 through 4.1 before Update 3a VMware VI-Client version 2.5 VMware ESXi versions 3.5 through 4.1 VMware ESX...

CVE-2013-1405: Improper Authentication

VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 before Update 3a, VMware VI-Client 2.5, VMware ESXi 3.5 through 4.1, and VMware ESX 3.5 through 4.1 do not properly implement the management...

VMware vSphere Client Memory Corruption (VMSA-2013-0001)

The version of vSphere Client installed on the remote Windows host is potentially affected by a memory corruption issue in the authentication mechanism. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64559; scriptversion"1.8"; scriptcvsdate"Date: 2019/12/04";...

VMware vSphere Hypervisor Vulnerability

Core Security - Corelabs Advisory 1. Advisory Information Title: VMware vSphere Hypervisor Vulnerability Advisory ID: CORE-2012-0710 Advisory URL: Date published: 2012-11-15 Date of last update: 2012-11-16 Vendors contacted: VMware Release mode: Coordinated release 2. Vulnerability Information...

Failed to parse "-quiescedsnap"

Challenge After you upgrade to VMware vSphere 4.1 Update 3, a new line is added to virtual machine configuration files .vmx. The line makes the VM configuration files invalid. As a result, Veeam Backup & Replication jobs fail. Solution The issue has been resolved in build 6.1.0.205. For details,...

"Object reference not set to an instance of an object" error when connecting a VMware vSphere 5 server

Challenge When you connect a VMware vSphere 5 server in the Connected VMware Servers section of the nworks Enterprise Manager Web UI, the following error occurs: Object reference not set to an instance of an object Cause Support of VMware vSphere 5 was introduced in nworks 5.7. Earlier versions o...