VMware Releases Security Advisory for ESX Service Console Updates

VMware has released a security advisory to address vulnerabilities in the Samba and acpid packages of ESX Service Console. These vulnerabilities may allow an attacker to cause a denial-of-service condition, obtain sensitive information or bypass security restrictions. US-CERT encourages users and...

VMSA-2010-0002 : VMware vCenter update release addresses multiple security issues in Java JRE

a. Java JRE Security Update JRE update to version 1.5.022, which addresses multiple security issues that existed in earlier releases of JRE. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the following names to the security issues fixed in JRE 1.5.018: CVE-2009-1093,...

VMware Host Agent Directory Traversal (VMSA-2009-0015)

The version of VMware Host Agent hostd running on the remote host has a directory traversal vulnerability. The affected service runs as root. VMware ESX, VMware ESXi, and VMware Server on Linux are affected. A remote attacker could exploit this to read arbitrary files, including guest VMs, from t...

VMware Fusion < 2.0.6 (VMSA-2009-0013)

The version of VMware Fusion installed on the Mac OS X host is earlier than 2.0.6. Such versions are affected by two security issues : - A vulnerability in the vmx86 kernel extension allows an unprivileged userland program to initialize several function pointers via the '0x802E564A' IOCTL code,...

VMSA-2009-0003 : ESX 2.5.5 patch 12 updates service console package ed

a. Updated ESX patch updates Service Console package ed ed is a line-oriented text editor, used to create, display, and modify text files both interactively and via shell scripts. A heap-based buffer overflow was discovered in the way ed, the GNU line editor, processed long file names. An attacke...

VMWare VMSA-2009-0005更新修复多个安全漏洞

BUGTRAQ ID: 34373 CVECAN ID: CVE-2008-4916,CVE-2008-3761,CVE-2009-1146,CVE-2009-1147,CVE-2009-0910,CVE-2009-0909,CVE-2009-0908,CVE-2009-0177,CVE-2009-0518 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMWare的VMSA-2009-0005更新修复了多个安全漏洞，本地或远程攻击者可以利用这些漏洞绕过某些安全限制、获得权限提升或导致拒绝服务。 1 如果远程攻击者在TCP...

VMSA-2009-0005 VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2009-0005 Synopsis: VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues Issue date:...

TPTI-09-01: VMWare VMnc Codec Invalid RFB Message Type Heap Overflow

TPTI-09-01: VMWare VMnc Codec Invalid RFB Message Type Heap Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-09-01 April 6, 2009 -- CVE ID: CVE-2009-0909 -- Affected Vendors: VMWare, Inc. -- Affected Products: VMWare, Inc. VMWare Player VMWare, Inc. VMWare Workstation VMWare,...

VMware宿主产品VMSA-2009-0005多个远程漏洞

BUGTRAQ ID: 34373 CVE ID：CVE-2008-4916 CVE-2008-3761 CVE-2009-1146 CVE-2009-1147 CVE-2009-0910 CVE-2009-0909 CVE-2009-0908 CVE-2009-0177 CVE-2009-0518 CNCVE ID：CNCVE-20084916 CNCVE-20083761 CNCVE-20091146 CNCVE-20091147 CNCVE-20090910 CNCVE-20090909 CNCVE-20090908 CNCVE-20090177 CNCVE-20090518...