70 matches found
CVE-2003-1291
VMware ESX Server 1.5.2 prior to Patch 4 is vulnerable to local privilege escalation: local users can execute arbitrary programs as root via certain modified VMware ESX Server environment variables. Root cause described as environment-variable manipulation. A fix is available in Patch 4 (see VMwa...
CVE-2005-3620
The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 records passwords in cleartext in URLs that are stored in world-readable web server log files, which allows local users to gain privileges...
CVE-2005-4773
The configuration of VMware ESX Server 2.x, 2.0.x, 2.1.x, and 2.5.x allows local users to cause a denial of service shutdown via the 1 halt, 2 poweroff, and 3 reboot scripts executed at the service console...
CVE-2005-3618
Cross-site request forgery CSRF vulnerability in the management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 allows allows remote attackers to perform unauthorized actions as the administrator via URLs, as demonstrated using...
CVE-2005-4583
Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 December 2005 allows "remote code execution in the Web browser" via unspecified attack vectors, probably related to cross-site scripting XSS...
CVE-2005-4583
Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 December 2005 allows "remote code execution in the Web browser" via unspecified attack vectors, probably related to cross-site scripting XSS...
CVE-2005-4583
Technical details about CVE-2005-4583 are not publicly provided in the supplied documents. No concrete affected products, vulnerable components, or remediation are specified here. Monitor for updates from official advisories.
Multiple VMware ESX Server problems
Web interface format string bugs and protection bypass, kernel memory access...
[SA13871] VMware ESX Server Three Vulnerabilities
TITLE: VMware ESX Server Three Vulnerabilities SECUNIA ADVISORY ID: SA13871 VERIFY ADVISORY: http://secunia.com/advisories/13871/ CRITICAL: Moderately critical IMPACT: Security Bypass, Exposure of system information, Exposure of sensitive information, System access WHERE: From local network...