MAL-014

MAL-014: VMware vCenter Server における認証済み任意ファイル読み取り “com.vmware.appliance.version1.system.update.set” API コンポーネントはフラグインジェクション攻撃に対して脆弱であり、“com.vmware.showlog” プラグインと組み合わせることで、対象システム上で “root” ユーザーとして任意のファイルを読み取ることができます。 注: この脆弱性を悪用するには、vCenter SSH シェルへの admin...

EUVD-2017-14060

Malware in sbrugna...

CVE-2017-4943

VMware vCenter Server Appliance vCSA 6.5 before 6.5 U1d contains a local privilege escalation vulnerability via the 'showlog' plugin. Successful exploitation of this issue could result in a low privileged user gaining root level privileges over the appliance base OS...

Privilege escalation

VMware vCenter Server Appliance vCSA 6.5 before 6.5 U1d contains a local privilege escalation vulnerability via the 'showlog' plugin. Successful exploitation of this issue could result in a low privileged user gaining root level privileges over the appliance base OS...

CVE-2017-4943

VMware vCenter Server Appliance vCSA 6.5 before 6.5 U1d contains a local privilege escalation vulnerability via the 'showlog' plugin. Successful exploitation of this issue could result in a low privileged user gaining root level privileges over the appliance base OS...

CVE-2009-0608

CVE-2009-0608 describes an integer overflow in the showLog function of fake_log_device.c within liblog on Android 1.0. Sending a large number of input lines can trigger a buffer overflow with unspecified additional impact. Affected component: Open Handset Alliance Android liblog (fake_log_device....