CVE-2014-3793

VMware Tools in VMware Workstation 10.x before 10.0.2, VMware Player 6.x before 6.0.2, VMware Fusion 6.x before 6.0.3, and VMware ESXi 5.0 through 5.5, when a Windows 8.1 guest OS is used, allows guest OS users to gain guest OS privileges or cause a denial of service kernel NULL pointer dereferen...

CVE-2014-3793

CVE-2014-3793 affects VMware Tools across VMware Workstation 10.x (<10.0.2), VMware Player 6.x (<6.0.2), VMware Fusion 6.x (

VMSA-2014-0005 : VMware Workstation, Player, Fusion, and ESXi patches address a guest privilege escalation

a. Guest privilege escalation in VMware Tools A kernel NULL dereference vulnerability was found in VMware Tools running on Microsoft Windows 8.1. Successful exploitation of this issue could lead to an escalation of privilege in the guest operating system. VMware would like to thank Tavis Ormandy...

VMSA-2014-0005:VMware Workstation, Player, Fusion, and ESXi patches address a guest privilege escalation

VMSA-2014-0005 VMware Workstation, Player, Fusion, and ESXi patches address a guest privilege escalation VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2014-0005 VMware Security Advisory Synopsis: VMware Workstation, Player, Fusion, and ESXi patches address a guest privilege...

Backup job reports Unfreeze Error (Over VIX)

Challenge Backup job returns an error: Unfreeze error over VIX: Backup job failed. Running vssadmin list writers command within the guest may result in: Non-Retryable error for Volume Shadow Copy Service VSS of the Microsoft Exchange Replication service Cause This issue is Microsoft-related and...

Credentials Test or Job Fails when attempt to use VIX

Challenge When using Veeam Backup & Replication with a VMware environment the following error may be seen when using the Guest Credentials Test or when processing a VM that is in a DMZ or Isolated environment. Failed to prepare guest for hot backup. Error: Failed to connect to guest agent. Errors...

CVE-2012-1666

Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View before 5.1, and VMware ESX 4.1 before U3 and 5.0 before P03 allows local users to gain privileges via a Trojan horse tpfc.dll file in the...

CVE-2012-1666

The CVE-2012-1666 entry describes an untrusted search path vulnerability in VMware Tools components across VMware Workstation (before 8.0.4), VMware Player (before 4.0.4), VMware Fusion (before 4.1.2), VMware View (before 5.1), and VMware ESX (4.1 before U3 and 5.0 before P03). The underlying iss...

VMWare Tools privilege escalation

It's possible to execute code via DLL hijacking...

VMWare Tools susceptible to binary planting by hijack

Security Advisory - VMWare Tools susceptible to binary planting by hijack ========================================================================= Summary : VMWare Tools susceptible to binary planting Date : 4 September 2012 Affected versions : Product versions prior to - Workstation 8.0.4 Playe...

VMWare ESXi / ESX weak permissions

VMWare Tools folder weak permissions...

VMSA-2012-0007 VMware hosted products and ESXi/ESX patches address privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2012-0007 Synopsis: VMware hosted products and ESXi/ESX patches address privilege escalation Issue date: 2012-04-12 Updated on: 2012-04-...

CVE-2012-1518

VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 use an incorrect ACL for the VMware Tools folder, which allows guest OS users to gain guest OS privileges via unspecified vectors...

VMware ESXi/ESX patches resolve multiple security issues (VMSA-2010-0007)

The remote ESXi is missing one or more security related Updates from VMSA-2010-0007. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMware ESXi/ESX patches address privilege escalation (VMSA-2012-0007)

The remote ESXi is missing one or more security related Updates from VMSA-2012-0007. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Patch 3 Release Notes for Veeam Backup & Replication 6.0.0.153

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge These are the issues resolved by the Patch 3 for Veeam Backup version 6.0.0.153. All patches are cumulative so each below fix is contained in this patch...

Appliance Mode (Hotadd) Requirements and Troubleshooting

Requirements Virtual Appliance HOTADD Requirements and Limitations Requirements for Backup and Restore of Encrypted VMs Known Issues If the VM disk resides on a vVol, the Veeam VMware Backup Proxy's VM configuration file vmx must be on the same vVol. The Veeam VMware Backup Proxy VM must be locat...

VMware Tools Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 VSR Security Advisory http://www.vsecurity.com/ - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: VMware Tools Multiple Vulnerabilities Release Date: 2011-06-03 Application: VMware Guest Tools Severity:...

Bonsai Information Security - VMware Tools update OS Command Injection

VMware Tools update OS Command Injection ======================================== 1. Advisory Information Advisory ID: BONSAI-2010-0110 Date published: Thu Dec 9, 2010 Vendors contacted: VMware Release mode: Coordinated release 2. Vulnerability Information Class: Injection Remotely Exploitable: Y...

VMware Tools update OS Command Injection

Exploit for multiple platform in category remote exploits ======================================== VMware Tools update OS Command Injection ======================================== 1. Advisory Information Advisory ID: BONSAI-2010-0110 Date published: Thu Dec 9, 2010 Vendors contacted: VMware...