CVE-2009-3733

CVE-2009-3733 describes a directory traversal vulnerability in VMware Server 1.x (before 1.0.10 build 203137) and 2.x (before 2.0.2 build 203138) on Linux, plus VMware ESXi 3.5 and VMware ESX 3.0.3/3.5. The issue allows remote attackers to read arbitrary files via unspecified vectors. Connected s...

CVE-2009-1805

CVE-2009-1805 concerns the VMware Descheduled Time Accounting DoS vulnerability. The issue affects multiple VMware products where the Descheduled Time Accounting Service is not running inside a Windows guest, allowing a guest OS user to cause a denial of service via unknown vectors. Affected prod...

CVE-2006-2662

CVE-2006-2662 relates to VMware Server before RC1, where credentials are not cleared from memory after a console connection. This memory-stays data can enable a local attacker with access to the machine to potentially gain privileges. Data in the connected documents confirms the issue description...

CVE-2008-3697

CVE-2008-3697 concerns a remote DoS in VMware Server via an ISAPI extension. The issue is triggered by sending a malformed request to an ISAPI extension (iisperl.dll), which can cause the IIS service to terminate. VMware documents that the vulnerable extension is part of VMware Server prior to 1....

CVE-2007-2491

CVE-2007-2491 concerns the PIIX4 power management subsystem in VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996. A crafted poke to I/O port 0x1004 lets a local user write to arbitrary memory, enabling a Denial of Service (virtual machine crash) or other unspecified impact. The issue i...

CVE-2006-3589

The CVE-2006-3589 issue affects VMware products on Linux: VMware Player/Workstation/Server for Linux, VMware ESX Server 2.x, and VMware Infrastructure 3. vmware-config.pl does not check the return code of Perl chmod, and lacks using safe_chmod, which can leave SSL key files with an unsafe umask a...