VMware ESX / ESXi Descheduled Time Accounting DoS (VMSA-2009-0007) (remote check)

The remote ESX / ESXi host is missing a security-related patch. It is, therefore, affected by an unspecified flaw in the Descheduled Time Accounting driver that allows a guest Windows user to cause a denial of service. Note that this issue can be exploited only if the feature is installed and the...

VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2012-0006) (remote check)

The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in the following components : - Kernel - krb5 telnet daemon %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

VMware ESX / ESXi Service Console and Third-Party Libraries Multiple Vulnerabilities (VMSA-2012-0001) (remote check)

The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party libraries : - COS kernel - cURL - python - rpm %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

VMware ESX Service Console Multiple Vulnerabilities (VMSA-2012-0008) (remote check)

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in the following components : - COS kernel - libxml2 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2012-0005) (BEAST) (remote check)

The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in the following components : - Apache Tomcat - bzip2 library - JRE - WDDM display driver - XPDM display driver...

VMware ESX WebWorks Help Multiple XSS (VMSA-2009-0017) (remote check)

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple cross-site scripting XSS vulnerabilities in WebWorks Help due to improper sanitization of user-supplied input to unspecified parameters or to messages used in topic links. A remote attacker can...

VMware ESX Multiple Vulnerabilities (VMSA-2009-0009) (remote check)

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in sudo in file parse.c due to a failure to properly interpret a system group %group in the sudoers configuration file when handling authorization decisions for...

VMware ESX Multiple Vulnerabilities (VMSA-2009-0004) (remote check)

The remote VMware ESX host is missing a security-related patch. It is, therefore, is affected by multiple vulnerabilities : - A format string flaw exists in the Vim help tag processor in the helptagsone function that allows a remote attacker to execute arbitrary code by tricking a user into...

VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2009-0016) (remote check)

The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in the following components : - Apache Geronimo - Apache Tomcat - Apache Xerces2 - cURL/libcURL - ISC BIND - Libxml2 -...

VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2012-0009) (remote check)

The remote VMware ESX / ESXi host is affected by multiple vulnerabilities : - Multiple privilege escalation vulnerabilities exist due to improper handling of RPC commands. A local attacker guest user can exploit these to manipulate data and function pointers, resulting in a denial of service...

VMware ESX / ESXi libxml2 Multiple Vulnerabilities (VMSA-2012-0012) (remote check)

The remote VMware ESX / ESXi host is affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist in the bundled libxml2 library in the xmlXPathNextPrecedingSibling, xmlNodePtr, and xmlXPathNextPrecedingInternal functions due to improper processing of namespaces a...

VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2012-0011) (remote check)

The remote VMware ESX / ESXi host is affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to improper sanitization of user-supplied input. A remote attacker can exploit this, via a specially crafted checkpoint file, to corrupt memory, resulting in a denial of...

VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2012-0013) (remote check)

The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party libraries : - Apache Struts - glibc - GnuTLS - JRE - kernel - libxml2 - OpenSSL - Perl - popt and...

VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2012-0016) (remote check)

The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several components and third-party libraries : - bind - expat - nspr and nss - python - vSphere API %NASLMINLEVEL 7030...

Streamed VM Setup Wizard Fails to Create VMs When Specifying an ESX Datacenter as the Hypervisor

Streamed VM Setup Wizard fails to create VMs when specifying an ESX datacenter as the hypervisor. The wizard completes but reports 0 of 5 VMs created. A CDF trace during the failure will report an exception in PVSDllHypervisorPlatform - "the resource vim.dvs.DistributedVirtualPort is not...

VMware ESX / ESXi Multiple DoS (VMSA-2014-0001)

The remote VMware ESX / ESXi host is affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists due to a NULL pointer deference flaw when handling Network File Copy NFC traffic. An unauthenticated, remote attacker can exploit this by intercepting and...

VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2014-0002)

The remote VMware ESX / ESXi host is affected by multiple vulnerabilities : - Multiple integer overflow conditions exist in the glibc package in file malloc/malloc.c. An unauthenticated, remote attacker can exploit these to cause heap memory corruption by passing large values to the pvalloc,...

VMware ESX / ESXi vSphere Client RCE (VMSA-2014-0003)

The remote VMware ESX / ESXi host is affected by a remote code execution vulnerability in the vSphere Client versions 4.0 / 4.1 due to improper validation of updates to client files. An unauthenticated, remote attacker can exploit this, via a malicious link, to download and execute arbitrary code...

VMware ESX Multiple Bash Vulnerabilities (VMSA-2014-0010) (Shellshock)

The remote VMware ESX host is affected by multiple vulnerabilities in the Bash shell : - A command injection vulnerability exists in GNU Bash known as Shellshock. The vulnerability is due to the processing of trailing strings after function definitions in the values of environment variables. This...

Potential Vulnerability with Intel® LAN Products with SR-IOV

Summary: A potential issue impacting Intel® LAN products with SR-IOV capability is expected to be publicly disclosed by security researchers at an industry conference on August 13, 2015. Description: In Intel® LAN products with SR-IOV capability, the potential exists where, under specific...