Secunia

VMware has acknowledged some vulnerabilities in ESX Server, which can be exploited to disclose sensitive information in kernel memory, bypass certain security restrictions, and potentially compromise a vulnerable system.

1) A "ssl_log()" related format string error within the mod_proxy hook functions may potentially allow arbitrary code execution.

For more information:
SA12077

Successful exploitation requires that mod_proxy is enabled (not default setting).

2) Some race conditions and conversion errors within the Linux kernel when handling 64-bit file offset pointers may disclose large portions of kernel memory.

For more information:
SA12210

3) An error in mod_ssl allows clients to access a location using any cipher suite allowed by the virtual host configuration even though access to that location has been configured to require a specific set of cipher suites.

For more information:
SA12787

Solution
Update to version 2.5 or apply security update.
Further details available in Customer Area

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area