|
VMware ESX Server Three Vulnerabilities
|
|
Secunia Advisory:
|
SA13871
|
|
|
Release Date:
|
2005-01-17
|
|
Popularity:
|
10,573 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Security Bypass
Exposure of system information
Exposure of sensitive information
System access
|
|
Where:
|
From local network
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | VMware ESX Server 1.x
VMware ESX Server 2.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2004-0415
CVE-2004-0700
CVE-2004-0885
|
|
Description:
VMware has acknowledged some vulnerabilities in ESX Server, which can be exploited to disclose sensitive information in kernel memory, bypass certain security restrictions, and potentially compromise a vulnerable system.
1) A "ssl_log()" related format string error within the mod_proxy hook functions may potentially allow arbitrary code execution.
For more information:
SA12077
Successful exploitation requires that mod_proxy is enabled (not default setting).
2) Some race conditions and conversion errors within the Linux kernel when handling 64-bit file offset pointers may disclose large portions of kernel memory.
For more information:
SA12210
3) An error in mod_ssl allows clients to access a location using any cipher suite allowed by the virtual host configuration even though access to that location has been configured to require a specific set of cipher suites.
For more information:
SA12787
Solution:
Update to version 2.5 or apply security update.
VMware ESX Server 2.1.2 Patch 1 Security Update:
http://www.vmware.com/download/esx/esx212-10921update.html
VMware ESX Server 2.0.1 Patch 1 Security Update:
http://www.vmware.com/download/esx/esx201-11429update.html
VMware ESX Server 1.5.2 Patch 6 Security Update:
http://www.vmware.com/download/esx/esx152-10816update.html
Other References:
SA12077:
http://secunia.com/advisories/12077/
SA12210:
http://secunia.com/advisories/12210/
SA12787:
http://secunia.com/advisories/12787/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
