958 matches found
CVE-2011-2146
CVE-2011-2146 concerns the VMware Host Guest File System (HGFS) disclosure issue. The description specifies that mount.vmhgfs in VMware Workstation (7.1.x before 7.1.4), VMware Player (3.1.x before 3.1.4), VMware Fusion (3.1.x before 3.1.3), and VMware ESXi/ESX (versions 3.5–4.1) allows guest OS ...
CVE-2011-1787
Race condition in mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to gain privileges on the gues...
VMware Releases Security Advisory
VMware has released security advisory VMSA-2011-0009 to address multiple vulnerabilities in the following products: VMware Workstation 7.1.3 and earlier VMware Player 3.1.3 and earlier VMware Fusion 3.1.2 and earlier ESXi 4.1 without patch ESXi410-201104402-BG ESXi 4.0 without patch...
VMSA-2011-0009:VMware hosted product updates, ESX patches and VI Client update resolve multiple security issue
VMSA-2011-0009.3 VMware hosted product updates, ESX patches and VI Client update resolve multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2011-0009.3 VMware Security Advisory Synopsis: VMware hosted product updates, ESX patches and VI Client update...
CVE-2011-1786
lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware ESXi 4.1 and ESX 4.1 and possibly other products, allows remote attackers to cause a denial of service daemon crash via an Active Directory login...
CVE-2011-1785
VMware ESXi 4.0 and 4.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service socket exhaustion via unspecified network traffic...
Design/Logic Flaw
VMware ESXi 4.0 and 4.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service socket exhaustion via unspecified network traffic...
CVE-2011-1786
lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware ESXi 4.1 and ESX 4.1 and possibly other products, allows remote attackers to cause a denial of service daemon crash via an Active Directory login...
CVE-2011-1785
VMware ESXi 4.0 and 4.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service socket exhaustion via unspecified network traffic...
CVE-2011-1786
The connected sources confirm CVE-2011-1786 is a denial-of-service issue affecting VMware ESXi/ESX hosts via the Likewise lsassd component when an Active Directory login uses a username with an invalid byte sequence. Affected releases include ESXi 4.1/4.0 (and ESX 4.1/4.0) without patches, distri...
CVE-2011-1785
CVE-2011-1785 affects VMware ESXi/ESX 4.0–4.1 and ESXi/ESX 4.x; it enables a remote attacker to cause a denial of service via socket exhaustion from crafted network traffic. The VMSA-2011-0007 advisory and OpenVAS/Nessus entries describe this socket exhaustion issue and list affected releases (ES...
VMware ESXi / ESX DoS
Sockets exhaustion attack is possible...
VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2011-0007 Synopsis: VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console Iss...
VMSA-2011-0007 : VMware ESXi and ESX Denial of Service and third-party updates for Likewise components and ESX Service Console
a. ESX/ESXi Socket Exhaustion By sending malicious network traffic to an ESXi or ESX host an attacker could exhaust the available sockets which would prevent further connections to the host. In the event a host becomes inaccessible its virtual machines will continue to run and have network...
VMSA-2011-0007:VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console
VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2011-0007 VMware Security Advisory Synopsis: VMware ESXi and ESX Denial of Service and third party updat...
CVE-2010-3609
The extension parser in slpv2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon SLPD in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, allows remote attackers to cause a denial of service infinite loop via a packet with a "next...
Design/Logic Flaw
The extension parser in slpv2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon SLPD in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, allows remote attackers to cause a denial of service infinite loop via a packet with a "next...
CVE-2010-3609
OpenSLP vulnerability CVE-2010-3609 affects OpenSLP 1.2.1 and earlier (before SVN r1647) used in SLPD (e.g., VMware ESX/ESXi products). A remote attacker can cause a denial of service (infinite loop) by sending a crafted packet with a next extension offset that references this or a previous exten...
CVE-2010-3609
The extension parser in slpv2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon SLPD in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, allows remote attackers to cause a denial of service infinite loop via a packet with a "next...