70 matches found
VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0007 Synopsis: VMware ESX Server 2.1.3 Upgrade Patch 2 Patch URL: http://www.vmware.com/download/esx/esx-213-200610-patch.html...
VMSA-2006-0009 - VMware ESX Server 3.0.0 AMD fxsave/restore issue
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0009 Synopsis: VMware ESX Server 3.0.0 AMD fxsave/restore issue Knowledge base URL:http://kb.vmware.com/kb/2533126 Issue date:...
VMWare ESX Server multiple security vulnerabilities
Invalid AMD fxsave/restore instructions handling. Vulnerabilities in embedded packages...
VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0006 Synopsis: VMware ESX Server 2.5.3 Upgrade Patch 4 Patch URL: http://www.vmware.com/download/esx/esx-253-200610-patch.html...
VMware ESX Server management interface logs passwords in cleartext in a world-readable file
Overview Certain versions of VMware ESX Server store passwords in a cleartext file that all users have read permissions to. Description Per the VMware ESX Server datasheet:ESX Server installs directly on the server hardware, or “bare metal,” and inserts a robust virtualization layer between the...
Corsaire Security Advisory - VMware ESX Server Password Cross Site Request Forgery issue
-- Corsaire Security Advisory -- Title: VMware ESX Server Password Cross Site Request Forgery issue Date: 14.11.05 Application: VMware ESX prior to 2.5.3 upgrade patch 2 VMware ESX prior to 2.1.3 upgrade patch 1 VMware ESX prior to 2.0.2 upgrade patch 1 Environment: VMware ESX Author: Stephen de...
Cross site scripting
VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and vmware.mui.sid cookies, which allows attackers to gain privileges by obtaining the cookies using attacks such as cross-site scripting CVE-2005-36...
CVE-2006-2481
VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and vmware.mui.sid cookies, which allows attackers to gain privileges by obtaining the cookies using attacks such as cross-site scripting CVE-2005-36...
CVE-2006-2481
VMware ESX Server vulnerability CVE-2006-2481 affects ESX 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4. The Management Interface stores authentication credentials in base64-encoded form inside cookies (vmware.mui.kid and vmware.mui.sid). If an attacker can access these cookies (e.g., via cross...
CVE-2005-3618
Cross-site request forgery CSRF vulnerability in the management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 allows allows remote attackers to perform unauthorized actions as the administrator via URLs, as demonstrated using...
CVE-2005-3620
The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 records passwords in cleartext in URLs that are stored in world-readable web server log files, which allows local users to gain privileges...
CVE-2005-3620
CVE-2005-3620 affects VMware ESX Server: versions 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 store passwords in cleartext in URLs that are logged in world-readable web server logs. This enables local users to view passwords and potentially gain privileges...
CVE-2005-3618
CVE-2005-3618 describes a CSRF vulnerability in VMware ESX Server’s Management Interface that can let an attacker modify a known user’s password via a crafted URL. Affected products/versions include ESX Server 2.0.x prior to 2.0.2 patch 1, 2.1.x prior to 2.1.3 patch 1, and 2.x prior to 2.5.3 patc...
VMware ESX 2.x - Multiple Information Disclosure Vulnerabilities
VMware ESX 2.x - Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/19249/info VMware ESX is prone to multiple information-disclosure vulnerabilities. These issues are due to a design error in the application. The following issues were reported: 1. An...
CVE-2006-3589
vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key...
CVE-2006-3589
vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key...
CVE-2006-3589
The CVE-2006-3589 issue affects VMware products on Linux: VMware Player/Workstation/Server for Linux, VMware ESX Server 2.x, and VMware Infrastructure 3. vmware-config.pl does not check the return code of Perl chmod, and lacks using safe_chmod, which can leave SSL key files with an unsafe umask a...
CVE-2005-4773
The configuration of VMware ESX Server 2.x, 2.0.x, 2.1.x, and 2.5.x allows local users to cause a denial of service shutdown via the 1 halt, 2 poweroff, and 3 reboot scripts executed at the service console...
CVE-2005-4773
Technical details, affected products, and exploit information for CVE-2005-4773 are not publicly provided in the connected documents. Monitor for updates from trusted sources.