Critical: java-1.6.0-openjdk

Issue Overview: A flaw was found in the Java RMI Remote Method Invocation registry implementation. A remote RMI client could use this flaw to execute arbitrary code on the RMI server running the registry. CVE-2011-3556 A flaw was found in the Java RMI registry implementation. A remote RMI client...

Unable to Use the "Processes" Tab in Veeam ONE

Challenge The following message is displayed when opening the Processes tab in Veeam ONE Client for a Virtual Machine: Failed to connect to the Guest OS. Verify that server is up, running, and accessible to Veeam ONE server. Solution Please ensure that the prerequisites are met: VMware vSphere...

Critical: Red Hat Security Advisory: java-1.6.0-openjdk security update

Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Adobe Flash Player ActionScript Recursive StackOverflowError (APSB11-26; CVE-2011-2426)

The vulnerability is due to an error in the ActionScript Virtual Machine AVM while handling malicious Flash files. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a web-page containing specially crafted Flash files. Successful exploitation may allow an...

Creating snapshots in a different location than default virtual machine directory

How to change the default virtual machine working directory location for snapshots...

KVM / QEMU Guest Detection (credentialed check)

According to its model name, the machine is running on a QEMU virtual processor. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56300; scriptversion"$Revision: 1.2 $"; scriptcvsdate"$Date: 2011/11/21 21:29:12 $"; scriptnameenglish:"KVM / QEMU Guest Detection...

flash-plugin: critical flaws fixed in APSB11-26

Stack-based buffer overflow in the ActionScript Virtual Machine AVM component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-2426

Stack-based buffer overflow in the ActionScript Virtual Machine AVM component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-2427

Adobe Flash Player AVM stack-based overflow (CVE-2011-2427) affects the ActionScript Virtual Machine in desktop platforms (Windows, macOS, Linux, Solaris) and Android prior to versions 10.3.183.10 (desktop) and 10.3.186.7 (Android). The vulnerability allows arbitrary code execution or a denial of...

Changed block tracking cannot be enabled: virtual hardware version 7 or later required

Challenge The backup or replication job is processed slower than expected and gives the warning message "changed block tracking cannot be enabled: virtual hardware version 7 or later required." The job works without Changed Block Tracking, and the "changed block tracking cannot be enabled: virtua...

How to manually test hotadd functionality

Purpose This article documents the procedure for manually performing hotadd to test whether a Veeam Backup Proxy can attach a VM's base disks. Solution Requirements and Limitations Before testing, review Virtual Appliance HOTADD Requirements and Limitations Review KB1054:Appliance Mode Hotadd...

Xen DoS using IOMMU faults from PCI-passthrough guest

ISSUE DESCRIPTION A VM that controls a PCIE device directly can cause it to issue DMA requests to invalid addresses. Although these requests are denied by the IOMMU, the hypervisor needs to handle the interrupt and clear the error from the IOMMU, and this can be used to live-lock a CPU and...

CentOS Update for kvm-83-105.el5_ CESA-2009:1465 centos5 i386

Check for the Version of kvm-83-105.el5 OpenVAS Vulnerability Test CentOS Update for kvm-83-105.el5 CESA-2009:1465 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

CentOS Update for rgmanager CESA-2009:1339 centos5 i386

Check for the Version of rgmanager OpenVAS Vulnerability Test CentOS Update for rgmanager CESA-2009:1339 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Failed to open VDDK disk error in Virtual Appliance mode, IDE virtual disks not supported

Processing the VM with IDE virtual disks in VA/hotadd mode fails...

RedHat Update for Red Hat Enterprise Linux 5.7 kernel RHSA-2011:1065-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

kernel: xen: svm: insufficiencies in handling emulated instructions during vm exits

The instruction emulation in Xen 3.0.3 allows local SMP guest users to cause a denial of service host crash by replacing the instruction that causes the VM to exit in one thread with a different instruction in a different thread...

Microsoft Hyper-V VMBus CVE-2011-1872拒绝服务漏洞

Bugtraq ID: 48179 CVE ID：CVE-2011-1872 Microsoft Hyper-V是一款微软开发的免费的虚拟服务器。 处理某些机器指令时存在一个验证错误，向VMBus通信通道发送特制的报文可使Hyper-V服务器和所有Guest虚拟机停止响应。 攻击者必须拥有合法登录验证信息并可以从Guest虚拟机发送特制内容。 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 0 Microsoft Windows Server 2008 for x64-based Systems SP2 Microso...

Solaris Gather Virtual Environment Detection

This module attempts to determine whether the system is running inside of a virtual environment and if so, which one. This module supports detection of Solaris Zone, VMWare, VirtualBox, Xen, and QEMU/KVM. This module requires Metasploit: https://metasploit.com/download Current source:...

Microsoft .NET Framework Arbitrary Code Execution (MS11-039; CVE-2011-0664)

The Microsoft .NET Framework is a software framework that includes a large library of coded solutions to common programming problems and a virtual machine that manages the execution of programs written specifically for the framework. A remote code execution vulnerability has been reported in...