307 matches found
VMSA-2010-0007: VMware hosted products, vCenter Server and ESX patches resolve multiple security issues
The remote ESXi is missing one or more security related Updates from VMSA-2010-0007. Summary VMware hosted products, vCenter Server and ESX patches resolve multiple security issues Relevant releases VMware Workstation 7.0, VMware Workstation 6.5.3 and earlier, VMware Player 3.0, VMware Player 2.5...
VMware ESXi/ESX patches address privilege escalation (VMSA-2012-0007)
The remote ESXi is missing one or more security related Updates from VMSA-2012-0007. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
VMware ESX/ESXi SLPD denial of service vulnerability and ESX third party updates for Service Console packages bind, pam, and rpm (VMSA-2011-0004.3)
The remote ESXi is missing one or more security related Updates from VMSA-2011-0004.3. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
VMware ESXi/ESX patches and VI Client update resolve multiple security issues (VMSA-2011-0009.3)
The remote ESXi is missing one or more security related Updates from VMSA-2011-0009.3. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
VMware ESXi/ESX patches address several security issues (VMSA-2012-0005)
The remote ESXi is missing one or more security related Updates from VMSA-2012-0005. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
VMware ESXi/ESX Third party component updates (VMSA-2011-0003.2)
The remote ESXi is missing one or more security related Updates from VMSA-2011-0003.2. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
VMware ESXi/ESX third party updates for Service Console and Likewise components (VMSA-2010-0016)
The remote ESXi is missing one or more security related Updates from VMSA-2010-0016. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
VMware ESXi/ESX third party component updates (VMSA-2011-0013.2)
The remote ESXi is missing one or more security related Updates from VMSA-2011-0013.2. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
VMware vCenter Update Manager Directory Traversal (VMSA-2011-0014)
The version of Jetty web server included with VMware vCenter Update Manager on the remote host has a directory traversal vulnerability. This is a variant of the issue previously addressed by VMware advisory VMSA-2010-0012. The web server runs as SYSTEM by default. A remote, unauthenticated attack...
VMSA-2011-0014:VMware vCenter Update Manager fix for Jetty Web server addresses directory traversal vulnerability
VMSA-2011-0014 VMware vCenter Update Manager fix for Jetty Web server addresses directory traversal vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2011-0014 VMware Security Advisory Synopsis: VMware vCenter Update Manager fix for Jetty Web server addresses...
VMware Products Multiple Vulnerabilities (VMSA-2011-0009) - Linux
VMWare products are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
VMSA-2011-0007 : VMware ESXi and ESX Denial of Service and third-party updates for Likewise components and ESX Service Console
a. ESX/ESXi Socket Exhaustion By sending malicious network traffic to an ESXi or ESX host an attacker could exhaust the available sockets which would prevent further connections to the host. In the event a host becomes inaccessible its virtual machines will continue to run and have network...
VMware Workstation 'vmrun' Library Path Privilege Escalation Vulnerability (VMSA-2011-0006) - Linux
VMware Workstation is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
VMware Releases Security Advisory VMSA-2010-0018
VMware has released security advisory VMSA-2010-0018 to address multiple vulnerabilities affecting VMware Workstation, Player, Fusion, ESXi, and ESX. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code or operate with elevated privileges. US-CERT encourages users...
VMSA-2010-0010 : ESX 3.5 third-party update for Service Console kernel
a. Service Console update for COS kernel The service console package kernel is updated to version 2.4.21-63. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2008-5029, CVE-2008-5300, CVE-2009-1337, CVE-2009-1385, CVE-2009-1895, CVE-2009-2848, CVE-2009-300...
VMware Products 'vmware-vmx' Information Disclosure Vulnerability (Linux)
The host is installed with VMWare products and are prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbvmwareprdtsvmxinfodiscvulnlin.nasl 5388 2017-02-21 15:13:30Z teissa $ VMware Products 'vmware-vmx' Information Disclosure Vulnerability Linux Authors: Antu Sanadi...
VMware Remote Console e.x.p build-158248 - Format String
DSECRG-09-053 VMware Remote Console - format string vulnerability http://www.dsecrg.com/pages/vul/show.php?id=153 VMrc vulnerable to format string attacks. Exploitation of this issue may lead to arbitrary code execution on the system where VMrc is installed. Digital Security Research Group DSecRG...
VMware ESX WebAccess Context Data XSS (VMSA-2010-0005)
The version of WebAccess hosted on the remote VMware ESX server has a cross-site scripting vulnerability. It is possible to specify which XML web service to use for a given session by passing a specially crafted value to the 'view' parameter of '/ui/vmDirect.do'. A remote attacker could exploit...
VMware Releases Security Advisory for ESX Service Console Updates
VMware has released a security advisory to address vulnerabilities in the Samba and acpid packages of ESX Service Console. These vulnerabilities may allow an attacker to cause a denial-of-service condition, obtain sensitive information or bypass security restrictions. US-CERT encourages users and...
VMSA-2010-0002 : VMware vCenter update release addresses multiple security issues in Java JRE
a. Java JRE Security Update JRE update to version 1.5.022, which addresses multiple security issues that existed in earlier releases of JRE. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the following names to the security issues fixed in JRE 1.5.018: CVE-2009-1093,...