CVE-2014-2690

Citrix VDI-in-a-Box 5.3.x before 5.3.6 and 5.4.x before 5.4.3 allows local users to obtain administrator credentials by reading the log...

Command injection

Citrix VDI-in-a-Box 5.3.x before 5.3.6 and 5.4.x before 5.4.3 allows local users to obtain administrator credentials by reading the log...

CVE-2014-2690

Citrix VDI-in-a-Box is affected (versions 5.3.x prior to 5.3.6 and 5.4.x prior to 5.4.3). Local users can obtain administrator credentials by reading the log. The available sources state the root cause as a log-read vulnerability but do not provide deeper technical details, exploit steps, or a pa...

CVE-2014-2690

Citrix VDI-in-a-Box 5.3.x before 5.3.6 and 5.4.x before 5.4.3 allows local users to obtain administrator credentials by reading the log...

CVE-2011-3571

Unspecified vulnerability in the Virtual Desktop Infrastructure VDI component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session. NOTE: this CVE identifier was accidentally used for a Concurrency issue in...

Design/Logic Flaw

Unspecified vulnerability in the Virtual Desktop Infrastructure VDI component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session. NOTE: this CVE identifier was accidentally used for a Concurrency issue in...

CVE-2011-3571

Unspecified vulnerability in the Virtual Desktop Infrastructure VDI component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session. NOTE: this CVE identifier was accidentally used for a Concurrency issue in...

CVE-2011-3571

Technical details for CVE-2011-3571 are not provided in the supplied documents. The entry notes confusion with a reassigned CVE (CVE-2012-0507). Monitor for updates from the referenced advisories; no product/version/vulnerability specifics are disclosed here.

Vanguard Defense Industries (VDI) Hacked for #Antisec Operation

Vanguard Defense Industries VDI Hacked for Antisec Operation AntiSec is targeting defense contractors again. Continuing their beef with law enforcement, and organizations that offer them support, they have targeted Richard Garcia, the Senior Vice President of Vanguard Defense Industries VDI...

Format string

libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted 1 qcow2, 2 VMDK, or 3 VDI header, related to lack of support for a dis...

CVE-2009-3923

The CVE-2009-3923 entry concerns VirtualBox 2.0.8/2.0.10 web service within Sun Virtual Desktop Infrastructure (VDI) 3.0 that does not require authentication. This allows remote attackers to obtain unspecified access through Apache HTTP Server–related request vectors. Relevant data from the conne...

Sun Solaris虚拟桌面架构不安全LDAP漏洞

Sun Solaris是一款流行的Unix操作系统。 Sun Solaris虚拟桌面架构VDI针对LDAP连接的安全加强实现存在安全错误，远程攻击者可以利用漏洞触发系统使用不加密连接，泄漏针对VDI配置数据的LDAP请求。 目前没有详细漏洞细节提供。 Sun Solaris 10 厂商解决方案 用户可联系供应商获得如下补丁： -- SPARC平台 -- Sun VDI Software 3.0 for Solaris 10: 采用补丁141481-02及之后版本. -- x86 Platform -- Sun VDI Software 3.0 for Solaris 10:...

Design/Logic Flaw

Sun Virtual Desktop Infrastructure VDI 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection, which might allow remote attackers to read cleartext VDI configuration-data requests by sniffing LDAP sessions on the...

CVE-2009-2856

Sun Virtual Desktop Infrastructure VDI 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection, which might allow remote attackers to read cleartext VDI configuration-data requests by sniffing LDAP sessions on the...

CVE-2009-2856

Sun Virtual Desktop Infrastructure VDI 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection, which might allow remote attackers to read cleartext VDI configuration-data requests by sniffing LDAP sessions on the...

CVE-2009-2856

Sun Virtual Desktop Infrastructure (VDI) 3.0 is affected when anonymous binding is enabled. The issue arises because the client’s attempt to establish an authenticated and encrypted connection is not properly handled, which might allow remote attackers to read cleartext VDI configuration‑data req...