VMWare VirtualCenter information leak

It's possible to obtain username information...

VMSA-2008-0012 Updated VirtualCenter addresses User Account Disclosure Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2008-0012 Synopsis: Updated VirtualCenter addresses User Account Disclosure Vulnerability Issue date: 2008-08-12 Updated on: 2008-08-...

VMWare VirtualCenter用户帐户信息泄露漏洞

BUGTRAQ ID: 30664 CVE ID：CVE-2008-3514 CNCVE ID：CNCVE-20083514 VMWare VirtualCenter是一款企业级的虚拟机构架管理软件，用于对分散的计算机环境中的虚拟机的管理和控制。 VMWare VirtualCenter存在信息泄漏问题，远程攻击者可以利用漏洞获得系统帐户的用户名。 目前没有详细漏洞细节提供。 VMWare VirtualCenter 2.0.2 VMWare VirtualCenter 2.5 Update 1 VMWare VirtualCenter 2.5 VMWare VirtualCenter...

CVE-2008-3514

VMware VirtualCenter 2.5 before Update 2 and 2.0.2 before Update 5 relies on client-side "enabled/disabled functionality" for access control, which allows remote attackers to determine valid user names by enabling functionality in the GUI and then making an "attempt to assign permissions to other...

Design/Logic Flaw

VMware VirtualCenter 2.5 before Update 2 and 2.0.2 before Update 5 relies on client-side "enabled/disabled functionality" for access control, which allows remote attackers to determine valid user names by enabling functionality in the GUI and then making an "attempt to assign permissions to other...

CVE-2008-3514

CVE-2008-3514 affects VMware VirtualCenter: versions 2.5 before Update 2 and 2.0.2 before Update 5 expose an information disclosure through client-side enabled/disabled functionality that can reveal usernames of system accounts. The root cause is a permission-control weakness in the GUI enabling ...

CVE-2008-3514

VMware VirtualCenter 2.5 before Update 2 and 2.0.2 before Update 5 relies on client-side "enabled/disabled functionality" for access control, which allows remote attackers to determine valid user names by enabling functionality in the GUI and then making an "attempt to assign permissions to other...

Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter

ESX patches and updates for VirtualCenter fix the followingapplication vulnerabilities...

VMSA-2008-0010:Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter

VMSA-2008-0010.3 Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0010.3 VMware Security AdvisorySynopsis: Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter VMware Security...

Updated Tomcat and Java JRE packages for VirtualCenter 2.5, VirtualCenter 2.0.2, ESX 3.5, ESX 3.0.2, and ESX 3.0.1.

Updated ESX and VirtualCenter fixes the following application vulnerabilities...

VMSA-2008-0002:Updated Tomcat and Java JRE packages for VirtualCenter 2.5, VirtualCenter 2.0.2, ESX 3.5, ESX 3.0.2, and ESX 3.0.1.

VMSA-2008-0002.1 Updated Tomcat and Java JRE packages for VirtualCenter 2.5, VirtualCenter 2.0.2, ESX 3.5, ESX 3.0.2, and ESX 3.0.1. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0002.1 VMware Security AdvisorySynopsis: Updated Tomcat and Java JRE packages for...

VMware VirtualCenter SSL会话中间人攻击漏洞

VirtualCenter是VMware的虚拟服务器管理系统。 VirtualCenter客户端在处理SSL连接的认证时存在漏洞，远程攻击者可能利用此漏洞通过中间人攻击劫持会话或窃听信息。 VirtualCenter客户端在初始化SSL握手期间没有验证服务端的x.509证书，允许攻击者通过中间人攻击创建不安全的信任关系。 VMWare VirtualCenter 2.0.1 VMWare VirtualCenter 2.0 VMWare VirtualCenter 1.4.1 VMWare VirtualCenter 1.4 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下...

CVE-2006-5990

VMWare VirtualCenter client 2.x before 2.0.1 Patch 1 Build 33643 and 1.4.x before 1.4.1 Patch 1 Build 33425, when server certificate verification is enabled, does not verify the server's X.509 certificate when creating an SSL session, which allows remote malicious servers to spoof valid servers v...

CVE-2006-5990

VMWare VirtualCenter client 2.x before 2.0.1 Patch 1 Build 33643 and 1.4.x before 1.4.1 Patch 1 Build 33425, when server certificate verification is enabled, does not verify the server's X.509 certificate when creating an SSL session, which allows remote malicious servers to spoof valid servers v...

CVE-2006-5990

CVE-2006-5990 concerns VMware VirtualCenter client 2.x before 2.0.1 Patch 1 (Build 33643) and 1.4.x before 1.4.1 Patch 1 (Build 33425). When server certificate verification is enabled, the client does not verify the server’s X.509 certificate during SSL session creation, allowing remote malicious...