VMware Server Directory Traversal Vulnerability

This modules exploits the VMware Server Directory Traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files. Common VMware server ports 80/8222 a...

VMware ESX and ESXi Server SOAP Request Handling Denial Of Service - Ver2 (CVE-2012-5703)

A denial of service vulnerability exists in VMware ESX and ESXi server. The vulnerability is due to improper handling of certain SOAP requests in the vSphere API. A remote unauthenticated attacker could exploit this vulnerability by sending specially crafted messages to the affected server...

VMware fixes XSS vulnerabilities and a certificate validation issue-bug warning-the black bar safety net

VMware this week released a series of patches fixes multiple vulnerabilities, including its server virtualization platform. A vulnerability exists in VMware vCenter Server Appliance vCSAis a VMware vCenter Server of a component. The mainXSSVulnerabilityCVE-2 0 1 4-3 7 9 7by Trustware Spiderlabs...

NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 VMware Security Advisory Advisory ID: VMSA-2014-0010 Synopsis: VMware product updates address critical Bash security vulnerabilities Issue date: 2014-09-30 Updated on: 2014-09-30 Initial Advisory CVE numbers: CVE-2014-6271, CVE-2014-7169, CVE-2014-718...

VMSA-2014-0010 : VMware product updates address critical Bash security vulnerabilities (Shellshock)

a. Bash update for multiple products. Bash libraries have been updated in multiple products to resolve multiple critical security issues, also referred to as Shellshock. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the identifiers CVE-2014-6271, CVE-2014-7169,...

VMware Begins to Patch Bash Issues Across Product Line

Much like Heartbleed triggered vendors to issue out of band patches to remedy vulnerabilities that popped up earlier this year, Shellshock, the Bash vulnerability, has forced vendors’ hands in a similar fashion. Virtualization firm VMware issued a progress report on fixes for four different types...

VMware product updates address critical Bash security vulnerabilities

a. Bash update for multiple products. Bash libraries have been updated in multiple products to resolve multiple critical security issues, also referred to as Shellshock.The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the identifiers CVE-2014-6271, CVE-2014-7169,...

VMSA-2014-0010:VMware product updates address CRITICAL Bash security vulnerabilities

VMSA-2014-0010.13 VMware product updates address critical Bash security vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2014-0010.13 VMware Security Advisory Synopsis: VMware product updates address critical Bash security vulnerabilities VMware Security Advisor...

OpenSLP 1.2.1 & < 1647 trunk - Denial of Service Exploit

No description provided by source. !/usr/bin/python Title: OpenSLP DoS Author: Nicolas Gregoire @AgarriFR CVE: 2010-3609 Software download: http://www.openslp.org/download.html Version: v1.2.1 and trunk before revision 1647 Tested on: Linux Ubuntu 10.04, VMware ESX 4.0 Notes: It affects some othe...

VMware ESX 2.x Multiple Information Disclosure Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/19249/info VMware ESX is prone to multiple information-disclosure vulnerabilities. These issues are due to a design error in the application. The following issues were reported: 1. An information disclosure vulnerability...

VMware Remote Console e.x.p build-158248 - format string vulnerability

No description provided by source. DSECRG-09-053 VMware Remote Console - format string vulnerability http://www.dsecrg.com/pages/vul/show.php?id=153 VMrc vulnerable to format string attacks. Exploitation of this issue may lead to arbitrary code execution on the system where VMrc is installed...

VMware ESXi/ESX updates address OpenSSL security vulnerabilities (VMSA-2014-0004)

VMware product updates address OpenSSL security vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware ESXi/ESX updates to third party libraries (VMSA-2014-0002)

VMware has updated vSphere third party libraries. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMSA-2014-0001 VMware Workstation, Player, Fusion, ESXi, ESX and vCloud Director address several security issues

VMware Workstation, Player, Fusion, ESXi, ESX and vCloud Director address several security issues. OpenVAS Vulnerability Test $Id: gbVMSA-2014-0001.nasl 6750 2017-07-18 09:56:47Z teissa $ VMSA-2014-0001: VMware Workstation, Player, Fusion, ESXi, ESX and vCloud Director address several security...

VMware ESXi/ESX address several security issues (VMSA-2014-0001)

VMware ESXi and ESX address several security issues. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-1208

VMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0.1, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 allow guest OS users to cause a denial of service VMX process disruption by using an invalid port...

CVE-2014-1207

VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service NULL pointer dereference by intercepting and modifying Network File Copy NFC traffic...

Null pointer dereference

VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service NULL pointer dereference by intercepting and modifying Network File Copy NFC traffic...

CVE-2014-1207

CVE-2014-1207 affects VMware ESXi/ESX: versions ESXi 4.0–5.1 and ESX 4.0–4.1 are vulnerable via a NULL pointer dereference in NFC traffic handling, allowing remote attackers to cause a denial of service by intercepting/modifying NFC traffic. The issue is evidenced in multiple sources (NVD entry a...

CVE-2014-1207

VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service NULL pointer dereference by intercepting and modifying Network File Copy NFC traffic...