NEW VMSA-2013-0011 VMware ESXi and ESX address an NFC Protocol Unhandled Exception

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2013-0011 Synopsis: VMware ESXi and ESX address an NFC Protocol Unhandled Exception Issue date: 2013-08-29 Updated on: 2013-08-29...

VMWare ESX / ESXi NFC DoS

Unhandled exception on Network File Copy protocol handling...

VMware ESX及ESXi缓冲区溢出漏洞

BUGTRAQ ID: 62316 CVECAN ID: CVE-2013-3657 VMware ESX Server是为适用于任何系统环境的企业级虚拟计算机软件。 VMware ESX 4.1、4.0、VMware ESXi 5.0, 4.1, 4.0没有正确限制数据大小，存在缓冲区溢出漏洞，远程攻击者利用此漏洞可执行任意代码。 0 VMWare ESX 4.1 VMWare ESX 4.0 VMWare ESXi 5.0 VMWare ESXi 4.1 VMWare ESXi 4.0 厂商补丁： VMWare ------...

CVE-2013-3657

Buffer overflow in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors...

Directory traversal

Directory traversal vulnerability in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to delete arbitrary host OS files via unspecified vectors...

CVE-2013-3657

Buffer overflow in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors...

CVE-2013-3657

CVE-2013-3657 is a buffer-overflow vulnerability in VMware ESXi 4.0–5.0 and ESX 4.0/4.1 that enables remote attackers to execute arbitrary code or cause a DoS via unspecified vectors. Affected products include ESXi/ESX 4.0–4.1 and 5.0 without patches; JVN and NVD entries corroborate a remote-expl...

CVE-2013-3658

CVE-2013-3658 describes a directory traversal vulnerability in VMware ESXi/ESX 4.0–5.0 (ESXi 5.0, ESXi 4.x; ESX 4.x) that allows a remote attacker to delete arbitrary host OS files via unspecified vectors. Public sources consistently cite impact as remote file deletion. Affected products/versions...

CVE-2013-3658

Directory traversal vulnerability in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to delete arbitrary host OS files via unspecified vectors...

JVN#72911629: VMware ESX and ESXi vulnerable to directory traversal

VMware ESX and ESXi contains a directory traversal vulnerability. Impact A remote attacker may delete arbitrary files on the host operating system. Solution Apply an Update Apply the latest update for the version of the software being used. Products Affected VMware ESXi 5.0 without patch...

JVN#19847770: VMware ESX and ESXi vulnerable to buffer overflow

VMware ESX and ESXi contains a buffer overflow vulnerability. Impact A remote attacker may cause a denial-of-service DoS or execute arbitrary code. Solution Apply an Update Apply the latest update for the version of the software being used. Products Affected VMware ESXi 5.0 without patch...

CVE-2013-1661

VMware ESXi 4.0 through 5.1, and ESX 4.0 and 4.1, does not properly implement the Network File Copy NFC protocol, which allows man-in-the-middle attackers to cause a denial of service unhandled exception and application crash by modifying the client-server data stream...

Design/Logic Flaw

VMware ESXi 4.0 through 5.1, and ESX 4.0 and 4.1, does not properly implement the Network File Copy NFC protocol, which allows man-in-the-middle attackers to cause a denial of service unhandled exception and application crash by modifying the client-server data stream...

CVE-2013-1661

VMware ESXi 4.0 through 5.1, and ESX 4.0 and 4.1, does not properly implement the Network File Copy NFC protocol, which allows man-in-the-middle attackers to cause a denial of service unhandled exception and application crash by modifying the client-server data stream...

CVE-2013-1661

CVE-2013-1661 affects VMware ESXi 4.0–5.1 and ESX 4.0–4.1, where the NFC protocol handling can be exploited by MITM to trigger a denial of service (unhandled exception and crash). The issue stems from improper NFC data stream processing. VM advisories (VMSA-2013-0011) document affected releases a...

VMware ESXi及ESX NFC协议处理远程拒绝服务漏洞

BUGTRAQ ID: 62077 CVECAN ID: CVE-2013-1661 VMware ESX Server是为适用于任何系统环境的企业级虚拟计算机软件 ESXi 4.0, 4.1, 5.0, 5.1、ESX 4.0, 4.1 在处理NFC协议时存在远程拒绝服务漏洞，要利用此漏洞，攻击者需要截获并修改ESXi/ESX和客户端之间的NFC流量，利用成功后可导致拒绝服务 0 VMWare ESX 4.1 VMWare ESX 4.0 VMWare ESXi 5.0 VMWare ESXi 4.1 VMWare ESXi 4.0 厂商补丁： VMWare ------...

VMSA-2013-0011 : VMware ESXi and ESX address an NFC Protocol Unhandled Exception

a. VMware ESXi and ESX NFC Protocol Unhandled Exception VMware ESXi and ESX contain a vulnerability in the handling of the Network File Copy NFC protocol. To exploit this vulnerability, an attacker must intercept and modify the NFC traffic between ESXi/ESX and the client. Exploitation of the issu...

VMware ESXi/ESX updates to third party libraries (VMSA-2013-0011)

VMware has updated VMware ESXi and ESX to address a vulnerability in an unhandled exception in the NFC protocol handler. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

VMSA-2013-0011 VMware ESX and ESXi updates to third party libraries

VMware has updated VMware ESXi and ESX to address a vulnerability in an unhandled exception in the NFC protocol handler. OpenVAS Vulnerability Test $Id: gbVMSA-2013-0011.nasl 6079 2017-05-08 09:03:33Z teissa $ VMSA-2013-0011 VMware ESX and ESXi updates to third party libraries Authors: Michael...

VMSA-2013-0011:VMware ESXi and ESX address an NFC Protocol Unhandled Exception

VMSA-2013-0011 VMware ESXi and ESX address an NFC Protocol Unhandled Exception VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2013-0011 VMware Security Advisory Synopsis: VMware ESXi and ESX address an NFC Protocol Unhandled Exception VMware Security Advisory Issue date:...