CVE-2009-3733

A directory traversal vulnerability in the VMware Host Agent (hostd) service allows remote attackers to read arbitrary files from the host system. This flaw affects VMware Server 1.x (before 1.0.10 build 203137), 2.x (before 2.0.2 build 203138) on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and ...

CVE-2009-1805

CVE-2009-1805 concerns the VMware Descheduled Time Accounting DoS vulnerability. The issue affects multiple VMware products where the Descheduled Time Accounting Service is not running inside a Windows guest, allowing a guest OS user to cause a denial of service via unknown vectors. Affected prod...

CVE-2008-3697

CVE-2008-3697 concerns a remote DoS in VMware Server via an ISAPI extension. The issue is triggered by sending a malformed request to an ISAPI extension (iisperl.dll), which can cause the IIS service to terminate. VMware documents that the vulnerable extension is part of VMware Server prior to 1....

CVE-2006-2662

CVE-2006-2662 relates to VMware Server before RC1, where credentials are not cleared from memory after a console connection. This memory-stays data can enable a local attacker with access to the machine to potentially gain privileges. Data in the connected documents confirms the issue description...

CVE-2006-3589

The CVE-2006-3589 issue affects VMware products on Linux: VMware Player/Workstation/Server for Linux, VMware ESX Server 2.x, and VMware Infrastructure 3. vmware-config.pl does not check the return code of Perl chmod, and lacks using safe_chmod, which can leave SSL key files with an unsafe umask a...

CVE-2007-2491

CVE-2007-2491 concerns the PIIX4 power management subsystem in VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996. A crafted poke to I/O port 0x1004 lets a local user write to arbitrary memory, enabling a Denial of Service (virtual machine crash) or other unspecified impact. The issue i...