(0Day) VMware vCenter Server Appliance Ruby vSphere Console Privilege Escalation Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of VMware vCenter Appliance. Authentication is required to exploit this vulnerability. The specific flaw exists within the usage of the Ruby vSphere Console RVC provided by the vCenter Server Applianc...

VMware ESXi/ESX vSphere Client updates address security vulnerabilities (VMSA-2014-0003)

VMware vSphere Client updates address security vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMSA-2014-0003 VMware vSphere Client updates address security vulnerabilities

VMware vSphere Client updates address security vulnerabilities OpenVAS Vulnerability Test $Id: gbVMSA-2014-0003.nasl 6663 2017-07-11 09:58:05Z teissa $ VMSA-2014-0003: VMware vSphere Client updates address security vulnerabilities Authors: Michael Meyer Copyright: Copyright c 2014 Greenbone...

Error "Unable to communicate with the remote host, since it is disconnected." with replication or restore

Article Applicability The error, "Unable to communicate with the remote host, since it is disconnected. " may occur for many reasons, some more straightforward than others. This article is specifically related to a more obscure scenario where the destination ESXi host runs a vSphere version that...

VMware vSphere Client Multiple Vulnerabilities (VMSA-2014-0003)

The version of vSphere Client installed on the remote Windows host is affected by the following vulnerabilities : - An error exists related to the vSphere Client that could allow an updated vSphere Client to be downloaded from an untrusted source. CVE-2014-1209 - An error exists related to the...

vSphere Client任意文件下载漏洞

Bugtraq ID:66772 CVE ID:CVE-2014-1209 VMware vCenter是VMware vSphere套件中一个强大的主机和虚拟机集中管理组件。 VMware vSphere Client 4.0, 4.1, 5.0 Update 3之前版本, 5.1 Update 2之前版本没有正确验证Client文件的更新，这可使远程攻击者触发任意程序的下载和执行。 0 VMWare vSphere Client 5.x VMWare vSphere Client 4.x 目前厂商已经发布了升级补丁以修复漏洞，请下载使用：...

CVE-2014-1209

VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution of an arbitrary program via unspecified vectors...

CVE-2014-1210

VMware vSphere Client 5.0 before Update 3 and 5.1 before Update 2 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate...

Design/Logic Flaw

VMware vSphere Client 5.0 before Update 3 and 5.1 before Update 2 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate...

Design/Logic Flaw

VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution of an arbitrary program via unspecified vectors...

CVE-2014-1209

VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution of an arbitrary program via unspecified vectors...

CVE-2014-1209

VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 are affected by CVE-2014-1209 due to improper validation of updates to Client files, which could allow a remote attacker to trigger the downloading and execution of an arbitrary program via unspecified vectors. Several c...

CVE-2014-1210

VMware vSphere Client 5.0 before Update 3 and 5.1 before Update 2 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate...

CVE-2014-1210

CVE-2014-1210 affects VMware vSphere Client, where server certificate validation is insufficient, allowing MITM via crafted X.509 certificates. Impacted versions include vSphere Client 5.0 (before Update 3) and 5.1 (before Update 2). Exploitation could enable spoofing of the vCenter server via SS...

CVE-2014-1209: Improper Input Validation

VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution of an arbitrary program via unspecified vectors...

CVE-2014-1210: Undefined Security Weakness

VMware vSphere Client 5.0 before Update 3 and 5.1 before Update 2 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate...

VMSA-2014-0003 : VMware vSphere Client updates address security vulnerabilities

a. vSphere Client Insecure Client Download vSphere Client contains a vulnerability in accepting an updated vSphere Client file from an untrusted source. The vulnerability may allow a host to direct vSphere Client to download and execute an arbitrary file from any URI. This issue can be exploited ...

KLA10436 Multiple vulnerabilities in VMware vSphere Client

Multiple critical vulnerabilities have been found in VMware vSphere. Malicious users can exploit these vulnerabilities to execute arbitrary code or bypass security. Below is a complete list of vulnerabilities 1. An improper client file update validation can be exploited remotely; 2. An improper...

VMSA-2014-0003:VMware vSphere Client updates address security vulnerabilities

VMSA-2014-0003 VMware vSphere Client updates address security vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2014-0003 VMware Security Advisory Synopsis: VMware vSphere Client updates address security vulnerabilities VMware Security Advisory Issue date:...

VMSA-2014-0002 VMware vSphere updates to third party libraries

VMware vSphere updates to third party libraries OpenVAS Vulnerability Test $Id: gbvcenterVMSA-2014-0002.nasl 6663 2017-07-11 09:58:05Z teissa $ VMware Security Updates for vCenter Server VMSA-2013-0012 Authors: Michael Meyer Copyright: Copyright c 2014 Greenbone Networks GmbH This program is free...