CVE-2017-4919

VMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges to use the VIX API to access Guest Operating Systems without the need to authenticate...

CVE-2017-4919

CVE-2017-4919 concerns VMware vCenter Server (versions 5.5, 6.0, 6.5) where vSphere users with limited privileges could use the VIX API to access Guest Operating Systems without authentication. The VMware VIX API VM Direct Access Function vulnerability stems from a capability that lets certain ma...

CVE-2017-4919: Missing Authentication for Critical Function

VMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges to use the VIX API to access Guest Operating Systems without the need to authenticate...

The vulnerability of the VMware Workstation hypervisor allows a malicious individual to gain control over the execution of the “vmrun” utility.

The perpetrator can gain control over the execution of the “vmrun” utility—a tool that allows various operations on virtual machines. This utility is used in VIX APIs of VMware 1.x up to 1.10.3, as well as VMware Workstation 6.5.x and 7.x up to 7.1.4 build 385536 for Linux. This was achieved by...

How to Collect Guest Processing Log Files

Purpose This article documents how to locate and gather guest-level log files associated with Application-Aware Processing or VM Guest OS File Indexing that occurs with Veeam Backup & Replication VM backup jobs. While investigating issues related to Guest Processing, additional logs must be...

Credentials Test or Job Fails when attempt to use VIX

Challenge When using Veeam Backup & Replication with a VMware environment the following error may be seen when using the Guest Credentials Test or when processing a VM that is in a DMZ or Isolated environment. Failed to prepare guest for hot backup. Error: Failed to connect to guest agent. Errors...

VMSA-2012-0009:VMware Workstation, Player, ESXi and ESX patches address CRITICAL security issues

VMSA-2012-0009.2 VMware Workstation, Player, ESXi and ESX patches address critical security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0009.2 VMware Security Advisory Synopsis: VMware Workstation, Player, ESXi and ESX patches address critical security issues...

VIX Error: Failed to resolve host Code: 30006

VIX Error: Failed to resolve host Code: 30006...

CVE-2011-1126

VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users to gain privileges via a Trojan horse shared library in an unspecified directory...

CVE-2011-1126

CVE-2011-1126 concerns VMware vmrun (used with VIX API 1.x on Linux and VMware Workstation 6.5.x/7.x) that is vulnerable to local privilege escalation via loading a malicious shared library from an insecure directory. The issue allows a local attacker to gain elevated privileges by exploiting lib...

CVE-2011-1126: Undefined Security Weakness

VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users to gain privileges via a Trojan horse shared library in an unspecified directory...

VMSA-2011-0006 VMware vmrun utility local privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2011-0006 Synopsis: VMware vmrun utility local privilege escalation Issue date: 2011-03-29 Updated on: 2011-03-29 initial release of...

VMware vmrun utility local privilege escalation

a. VMware Linux based vmrun utility local privilege escalationVMware vmrun is a utility that is used to perform various tasks on virtual machines. The vmrun utility runs on any platform with VIX libraries installed. It is installed in VMware Workstation by default.In non-standard filesystem...

VMSA-2011-0006:VMware vmrun utility local privilege escalation

VMSA-2011-0006.1 VMware vmrun utility local privilege escalation VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2011-0006.1 VMware Security Advisory Synopsis: VMware vmrun utility local privilege escalation VMware Security Advisory Issue date: 2011-03-29 VMware Security...

Format string

Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string...

CVE-2010-1139

Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string...

CVE-2010-1139

CVE-2010-1139 is a format-string vulnerability in VMware's vmrun (VMware VIX API 1.6.x) that may allow local users to execute code with the privileges of the listing user. Affected products/versions include VMware Workstation 6.5.x (before 6.5.4 build 246459), VMware Player 2.5.x (before 2.5.4 bu...

CVE-2010-1139

Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string...

CVE-2010-1139: Use of Externally-Controlled Format String

Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string...

VMware VIX API Multiple Buffer Overflow Vulnerabilities (Windows)

The host is installed with VMWare products that are vulnerable to multiple buffer overflow. OpenVAS Vulnerability Test $Id: gbvmwareprdtsvixapimultvuln.nasl 4917 2017-01-02 14:43:20Z cfi $ VMware VIX API Multiple Buffer Overflow Vulnerabilities Windows Authors: Chandan S Copyright: Copyright c 20...