VMSA-2013-0001 VMware vSphere security updates for the authentication service and third party libraries

The remote ESXi is missing one or more security related Updates from VMSA-2013-0001. Summary VMware vSphere security updates for for the authentication service and third party libraries Relevant releases vCenter Server 4.1 without Update 3a vSphere Client 4.1 without Update 3a ESXi 4.1 without...

VMware vSphere security updates for the authentication service and third party libraries

a. VMware vSphere client-side authentication memory corruption vulnerabilityVMware vCenter Server, vSphere Client, and ESX contain a vulnerability in the handling of the management authentication protocol. To exploit this vulnerability, an attacker must convince either vCenter Server, vSphere...

vCenter Server Appliance目录遍历漏洞(CVE-2012-6324)

Bugtraq ID:57021 CVE ID:CVE-2012-6324 VMware vCenter Server可以快速部署虚拟机，并监控物理服务器和虚拟机的性能，可通过单个界面部署、监控和管理虚拟化IT 环境，并确保最佳的服务级别。 vCenter Server Appliance存在一个目录遍历漏洞，允许通过验证的远程用户读取系统敏感文件内容。 0 VMware vCenter Server Appliance 5.x 厂商解决方案 VMware vCenter Server Appliance 5.1和vCenter Server Appliance 5.0 Update...

vCenter Server Appliance任意文件下载漏洞

Bugtraq ID:57022 CVE ID:CVE-2012-6325 VMware vCenter Server可以快速部署虚拟机，并监控物理服务器和虚拟机的性能，可通过单个界面部署、监控和管理虚拟化IT 环境，并确保最佳的服务级别。 vCenter Server Appliance存在一个XML解析漏洞，通过XML文件传递的输入在用于下载文件之前缺少校验，允许通过验证的远程用户获得系统任意文件。 0 VMware vCenter Server Appliance 5.x 厂商解决方案 VMware vCenter Server Appliance 5.1和vCenter Serv...

CVE-2012-6325

VMware vCenter Server Appliance vCSA 5.0 before Update 2 does not properly parse XML documents, which allows remote authenticated users to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in VMware vCenter Server Appliance vCSA 5.0 before Update 2 and 5.1 before Patch 1 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2012-6324

Directory traversal vulnerability in VMware vCenter Server Appliance vCSA 5.0 before Update 2 and 5.1 before Patch 1 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2012-6324

CVE-2012-6324 is a directory traversal vulnerability in VMware vCenter Server Appliance (vCSA) affecting vCSA 5.0 before Update 2 and 5.1 before Patch 1. An authenticated remote user can read arbitrary files via unspecified vectors. The advisory VMSA-2012-0018 confirms the issue and its remediati...

CVE-2012-6325

CVE-2012-6325 affects VMware vCenter Server Appliance (vCSA) 5.0 prior to Update 2, due to an XML parsing vulnerability that allows an authenticated remote user to read arbitrary files. The issue is documented in the VMware advisory VMSA-2012-0018 and is addressed by upgrading to vCSA 5.0 Update ...

CVE-2012-6324: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in VMware vCenter Server Appliance vCSA 5.0 before Update 2 and 5.1 before Patch 1 allows remote authenticated users to read arbitrary files via unspecified vectors...

PT-2012-6264

Name of the Vulnerable Software and Affected Versions VMware vCenter Server Appliance vCSA versions 5.0 before Update 2 VMware vCenter Server Appliance vCSA versions 5.1 before Patch 1 Description A directory traversal issue allows remote authenticated users to read arbitrary files via unspecifie...

PT-2012-6265

Name of the Vulnerable Software and Affected Versions VMware vCenter Server Appliance vCSA versions 5.0 before Update 2 Description The issue is related to improper parsing of XML documents, allowing remote authenticated users to read arbitrary files. Recommendations For versions 5.0 before Updat...

CVE-2012-6325: Exposure of Sensitive Information to an Unauthorized Actor

VMware vCenter Server Appliance vCSA 5.0 before Update 2 does not properly parse XML documents, which allows remote authenticated users to read arbitrary files via unspecified vectors...

VMware security updates for vCSA, vCenter Server, and ESXi

a. vCenter Server Appliance directory traversal The vCenter Server Appliance vCSA contains a directory traversal vulnerability that allows an authenticated remote user to retrieve arbitrary files. Exploitation of this issue may expose sensitive information stored on the server. VMware would like ...

VMSA-2012-0018:VMware security updates for vCSA, vCenter Server, and ESXi

VMSA-2012-0018.2 VMware security updates for vCSA, vCenter Server, and ESXi VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0018.2 VMware Security Advisory Synopsis: VMware security updates for vCSA, vCenter Server, and ESXi VMware Security Advisory Issue date: 2012-12-20...

Time difference between Veeam Monitor server and ESX host is too large.

Challenge When attempting to add a vCenter Server or a standalone host with a different time zone, the operation may fail with the error: Failed to connect to "". Time difference between Veeam Monitor server and ESX host is too large. Make sure that NTP is enabled on ESX host and try again. Cause...

Unable to collect files information from datastore in a timely manner due to high vCenter server load

Challenge Veeam ONE Reporter collects data from datastores using the SearchDatastoreSubFoldersTask tasks, which are pre-defined by vSphere. During that process, if a datastore becomes unavailable or experiences performance issues, Veeam ONE Reporter may be unable to complete data collection tasks...

Performance Charts for vSphere Environment Display "No data available"

Challenge Veeam ONE Client shows the "No data available" message on performance charts for different metrics: Cause Here are the most common reasons for missing data on the performance charts: The Veeam ONE service account does not have Write access to the "PerfСache" folder. The account used by...

VMSA-2010-0007: VMware hosted products, vCenter Server and ESX patches resolve multiple security issues

The remote ESXi is missing one or more security related Updates from VMSA-2010-0007. Summary VMware hosted products, vCenter Server and ESX patches resolve multiple security issues Relevant releases VMware Workstation 7.0, VMware Workstation 6.5.3 and earlier, VMware Player 3.0, VMware Player 2.5...

VMSA-20120005 VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, ESXi and ESX address several security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2012-0005 Synopsis: VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, ESXi and ESX address several security...