VMware Products Privilege Escalation Vulnerability (VMSA-2009-0015)

A VMware product Workstation, Player, ACE, or Server detected on the remote host has a privilege escalation vulnerability. Page fault exceptions are not handled properly, which could allow a local attacker to elevate privileges within the guest VM. This vulnerability reportedly does not affect th...

VMware Virtual 8086 - Linux Local Ring0

Bugtraq ID: 36841 Class: Design Error Published: Oct 27 2009 12:00AM Updated: Oct 27 2009 09:18PM Credit: Tavis Ormandy and Julien Tinnes of the Google Security Team Vulnerable: VMWare Workstation 6.5.3 VMWare Workstation 6.5.2 build 156735 VMWare Workstation 6.5.2 VMWare Workstation 6.5.1 VMWare...

VMWare Virtual 8086 Linux Local Ring0 Exploit

Exploit for unknown platform in category local exploits ============================================= VMWare Virtual 8086 Linux Local Ring0 Exploit ============================================= Title: VMWare Virtual 8086 Linux Local Ring0 Exploit CVE-ID: OSVDB-ID: Author: Tavis Ormandy and Julien...

VMware Virtual 8086 - Linux Local Ring0

VMware Virtual 8086 - Linux Local Ring0 Bugtraq ID: 36841 Class: Design Error Published: Oct 27 2009 12:00AM Updated: Oct 27 2009 09:18PM Credit: Tavis Ormandy and Julien Tinnes of the Google Security Team Vulnerable: VMWare Workstation 6.5.3 VMWare Workstation 6.5.2 build 156735 VMWare Workstati...

VMware Authorization Service DoS Vulnerability (CVE-2009-3707) - Windows

VMWare products are prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Format string

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware ACE 2.6 before 2.6.1 build 2276...

PT-2009-5966 · Vmware · Vmware Server +3

Name of the Vulnerable Software and Affected Versions: VMware Workstation versions 7.0 through 7.0.0 before build 227600 VMware Workstation version 6.5.x through 6.5.3 before build 246459 VMware Player versions 3.0 through 3.0.0 before build 227600 VMware Player version 2.5.x through 2.5.3 before...

KLA10166 ACE vulnerability in FrontRange HEAT

An SQL injection vulnerability was found in FrontRange HEAT. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely at a point related to Call Logging. Original advisories - Related products FrontRange-HEAT CVE list CVE-2009-3642...

CVE-2009-3457

Cisco ACE XML Gateway AXG and ACE Web Application Firewall WAF before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by 1 an OPTIONS request or 2 a crafted GET request, leading to a Message-handling Errors message containing a...

Information disclosure

Cisco ACE XML Gateway AXG and ACE Web Application Firewall WAF before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by 1 an OPTIONS request or 2 a crafted GET request, leading to a Message-handling Errors message containing a...

CVE-2009-3457

Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) prior to version 6.1 are affected by an information-disclosure vulnerability. An HTTP request that lacks a handler (e.g., an OPTIONS request or a crafted GET request) can trigger a Message-handling Errors message that exposes a cl...

CVE-2009-3457

Cisco ACE XML Gateway AXG and ACE Web Application Firewall WAF before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by 1 an OPTIONS request or 2 a crafted GET request, leading to a Message-handling Errors message containing a...

Cisco应用控制引擎(ACE) XML网关IP地址信息泄漏漏洞

Bugraq ID: 36522 Cisco ACE XML网关是Cisco应用控制引擎ACE家族产品的重要组件。 Cisco ACE XML网关缺少正确的错误处理管理，远程攻击者可以利用漏洞获得内部IP信息。 Cisco ACE XML网关在不能正确找到请求相匹配的处理器时，会直接对客户端提供包含内部IP地址的错误消息应答。 相关的请求不仅仅限于OPTIONS请求类型，如果GET请求使用的路径没有相应的处理器配置，也同样泄漏内部IP地址信息。 Cisco Application Control Engine ACE XML Gateway 6.0 Cisco Application...

Cisco ACE XML Gateway <= 6.0 Internal IP disclosure

+------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | | .'xxxxxxxxxxxxxxxxxxxxx''...... ... .. | |...

Cisco ACE XML Gateway information leakage

Internal address of server is leaked on some HTTP requests...

Cisco ACE XML Gateway <= 6.0 Internal IP disclosure

No description provided by source. +----------------------------------------------------------------------- -+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | |...

Cisco ACE XML Gateway <= 6.0 Internal IP disclosure

Exploit for unknown platform in category remote exploits =================================================== Cisco ACE XML Gateway = 6.0 Internal IP disclosure =================================================== Title: Cisco ACE XML Gateway = 6.0 Internal IP disclosure CVE-ID: OSVDB-ID: Author:...

Cisco ACE XML Gateway 6.0 - Internal IP Disclosure

Cisco ACE XML Gateway 6.0 - Internal IP Disclosure +----------------------------------------------------------------------- -+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | |...

Cisco ACE XML Gateway 6.0 - Internal IP Disclosure

+----------------------------------------------------------------------- -+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | | .'xxxxxxxxxxxxxxxxxxxxx''...... ... .. | |...

Memory corruption

The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 build 185404 on Windows does not properly handle certain small heights in video...