CVE-2013-1661

VMware ESXi 4.0 through 5.1, and ESX 4.0 and 4.1, does not properly implement the Network File Copy NFC protocol, which allows man-in-the-middle attackers to cause a denial of service unhandled exception and application crash by modifying the client-server data stream...

CVE-2013-1661

CVE-2013-1661 affects VMware ESXi 4.0–5.1 and ESX 4.0–4.1, where the NFC protocol handling can be exploited by MITM to trigger a denial of service (unhandled exception and crash). The issue stems from improper NFC data stream processing. VM advisories (VMSA-2013-0011) document affected releases a...

CVE-2013-1661: Improper Input Validation

VMware ESXi 4.0 through 5.1, and ESX 4.0 and 4.1, does not properly implement the Network File Copy NFC protocol, which allows man-in-the-middle attackers to cause a denial of service unhandled exception and application crash by modifying the client-server data stream...

VMware ESXi及ESX NFC协议处理远程拒绝服务漏洞

BUGTRAQ ID: 62077 CVECAN ID: CVE-2013-1661 VMware ESX Server是为适用于任何系统环境的企业级虚拟计算机软件 ESXi 4.0, 4.1, 5.0, 5.1、ESX 4.0, 4.1 在处理NFC协议时存在远程拒绝服务漏洞，要利用此漏洞，攻击者需要截获并修改ESXi/ESX和客户端之间的NFC流量，利用成功后可导致拒绝服务 0 VMWare ESX 4.1 VMWare ESX 4.0 VMWare ESXi 5.0 VMWare ESXi 4.1 VMWare ESXi 4.0 厂商补丁： VMWare ------...

VMSA-2013-0011 : VMware ESXi and ESX address an NFC Protocol Unhandled Exception

a. VMware ESXi and ESX NFC Protocol Unhandled Exception VMware ESXi and ESX contain a vulnerability in the handling of the Network File Copy NFC protocol. To exploit this vulnerability, an attacker must intercept and modify the NFC traffic between ESXi/ESX and the client. Exploitation of the issu...

VMSA-2013-0011 VMware ESX and ESXi updates to third party libraries

VMware has updated VMware ESXi and ESX to address a vulnerability in an unhandled exception in the NFC protocol handler. OpenVAS Vulnerability Test $Id: gbVMSA-2013-0011.nasl 6079 2017-05-08 09:03:33Z teissa $ VMSA-2013-0011 VMware ESX and ESXi updates to third party libraries Authors: Michael...

VMware ESXi/ESX updates to third party libraries (VMSA-2013-0011)

VMware has updated VMware ESXi and ESX to address a vulnerability in an unhandled exception in the NFC protocol handler. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

VMSA-2013-0011:VMware ESXi and ESX address an NFC Protocol Unhandled Exception

VMSA-2013-0011 VMware ESXi and ESX address an NFC Protocol Unhandled Exception VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2013-0011 VMware Security Advisory Synopsis: VMware ESXi and ESX address an NFC Protocol Unhandled Exception VMware Security Advisory Issue date:...

Ubuntu 12.10 : linux vulnerabilities (USN-1881-1)

An information leak was discovered in the Linux kernel when inotify is used to monitor the /dev/ptmx device. A local user could exploit this flaw to discover keystroke timing and potentially discover sensitive information like password length. CVE-2013-0160 An information leak was discovered in t...

USN-1883-1: Linux kernel (OMAP4) vulnerabilities

Kees Cook discovered a flaw in the Linux kernel's iSCSI subsystem. A remote unauthenticated attacker could exploit this flaw to cause a denial of service system crash or potentially gain administrative privileges. CVE-2013-2850 Andy Lutomirski discover an error in the Linux kernel's credential...

USN-1881-1: Linux kernel vulnerabilities

Andy Lutomirski discover an error in the Linux kernel's credential handling on unix sockets. A local user could exploit this flaw to gain administrative privileges. CVE-2013-1979 An information leak was discovered in the Linux kernel when inotify is used to monitor the /dev/ptmx device. A local...

Ubuntu 13.04 : linux vulnerabilities (USN-1837-1)

An information leak was discovered in the Linux kernel's crypto API. A local user could exploit this flaw to examine potentially sensitive information from the kernel's stack memory. CVE-2013-3076 An information leak was discovered in the Linux kernel's rcvmsg path for ATM Asynchronous Transfer...

VMware vCenter Server NFC Protocol Code Execution (VMSA-2013-0003)

The version of VMware vCenter installed on the remote host is 4.0 before update 4b, 5.0 before update 2, or 5.1 before 5.1.0b. Such versions are potentially affected by a denial of service vulnerability due to an issue in webservice logging. By exploiting this flaw, a remote, unauthenticated...

Mudge on the CFT

Peiter Zatko, also known as Mudge, has run the DARPA Cyber Fast Track program for the last three years, but he said that the researcher program is ending on April 1. The CFT program funded a wide range of security research projects in its time, including Charlie Miller’s NFC work and Moxie...

Groundbreaking Cyber Fast Track Research Program Ending

VANCOUVER–When Peiter Zatko, the security researcher and pioneering hacker known as Mudge, joined the federal government several years ago to help run a DARPA research program, some in the security industry wondered what effect someone with his background could have in an organization as famously...

VMware vCenter, ESXi, ESX NFC协议内存破坏漏洞

BUGTRAQ ID: 58115 CVECAN ID: CVE-2013-1659 VMware vCenter是VMware vSphere套件中一个强大的主机和虚拟机集中管理组件。VMware ESX Server是为适用于任何系统环境的企业级虚拟计算机软件。 VMware vCenter, ESXi, ESX NFC在处理NFC协议时存在安全漏洞，要利用此漏洞攻击者必须截获并修改vCenter Server与客户端或ESXi/ESX与客户端之间的NFC通讯。成功利用此漏洞可导致代码执行。 0 VMWare ESX 4.1 VMWare ESX 4.0 VMWare ESX 3.5...

VMware ESXi/ESX address an NFC Protocol memory corruption and third party library security issues (VMSA-2013-0003)

The remote ESXi is missing one or more security related Updates from VMSA-2013-0003. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMSA-2013-0003 VMware vCenter Server, ESXi and ESX address an NFC Protocol memory corruption and third party library security issues.

The remote ESXi is missing one or more security related Updates from VMSA-2013-0003. OpenVAS Vulnerability Test $Id: gbVMSA-2013-0003.nasl 6065 2017-05-04 09:03:08Z teissa $ VMSA-2013-0003 VMware vCenter Server, ESXi and ESX address an NFC Protocol memory corruption and third party library securi...

CVE-2013-1659

VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 do not properly implement the Network File Copy NFC protocol, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of...

Memory corruption

VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 do not properly implement the Network File Copy NFC protocol, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of...