VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2008-0009 Synopsis: Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX,...

CVE-2008-1363

VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges via an unspecified manipulation of a...

Core Security Technologies Advisory 2007.0930

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Path Traversal vulnerability in VMware's shared folders implementation Advisory Information Title: Path Traversal vulnerability in VMware's shared folders implementati...

Creative Ensoniq PCI ES1371 WDM Driver 5.1.3612 - Local Privilege Escalation

Creative Ensoniq PCI ES1371 WDM Driver 5.1.3612 - Local Privilege Escalation source: https://www.securityfocus.com/bid/27179/info Creative Ensoniq PCI ES1371 WDM drivers are prone to a local privilege-escalation vulnerability. Successful exploits allow local users to execute arbitrary machine cod...

VMWare Server Plaintext Authorization

Binary data 4288.prm...

CVE-2007-5618

Unquoted Windows search path vulnerability in the Authorization and other services in VMware Player 1.0.x before 1.0.5 and 2.0 before 2.0.1, VMware Server before 1.0.4, and Workstation 5.x before 5.5.5 and 6.x before 6.0.1 might allow local users to gain privileges via malicious programs...

CVE-2007-5619

Unspecified vulnerability in VMware Server before 1.0.4 causes user passwords to be recorded in cleartext in server logs, which might allow local users to gain privileges...

Design/Logic Flaw

Unspecified vulnerability in VMware Server before 1.0.4 causes user passwords to be recorded in cleartext in server logs, which might allow local users to gain privileges...

VMware Server Installed (Windows)

VMware Server is installed on the remote Windows host. C Tenable, Inc. include"compat.inc"; if description scriptid26200; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/06/17"; scriptnameenglish:"VMware Server Installed Windows";...

CVE-2007-5024

EMC VMware Server before 1.0.4 Build 56528 writes passwords in cleartext to unspecified log files, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2005-3620...

CVE-2007-5024

EMC VMware Server before 1.0.4 Build 56528 writes passwords in cleartext to unspecified log files, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2005-3620...

Design/Logic Flaw

EMC VMware Server before 1.0.4 Build 56528 writes passwords in cleartext to unspecified log files, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2005-3620...

CVE-2007-5024

CVE-2007-5024 affects EMC VMware Server prior to 1.0.4 Build 56528, where passwords are written in cleartext to unspecified log files. This local-information disclosure could allow a local attacker to read credentials by accessing these log files. The description explicitly notes this is a differ...

CVE-2007-5024

EMC VMware Server before 1.0.4 Build 56528 writes passwords in cleartext to unspecified log files, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2005-3620...

Design/Logic Flaw

The PIIX4 power management subsystem in EMC VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996 allows local users to write to arbitrary memory locations via a crafted poke to I/O port 0x1004, triggering a denial of service virtual machine crash or other unspecified impact, a related iss...

CVE-2006-2662

VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might allow local attackers to gain privileges...

Design/Logic Flaw

VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might allow local attackers to gain privileges...

CVE-2006-2662

VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might allow local attackers to gain privileges...

VMware ESX/GSX Server Authentication Daemon Detection

The authentication daemon for VMware ESX or GSX was detected on the remote host. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid20301; scriptversion"1.21"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/06/17";...