|
 |
|
VMware ESX Server Multiple Security Updates
|
|
|
|
|
Secunia Advisory:
|
SA24636
|
|
|
Release Date:
|
2007-03-30
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Manipulation of data
Privilege escalation
DoS
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | VMware ESX Server 2.x
VMware ESX Server 3.x
|
|
| | CVE reference: | CVE-2006-3739 (Secunia mirror)
CVE-2006-3740 (Secunia mirror)
CVE-2006-4334 (Secunia mirror)
CVE-2006-4338 (Secunia mirror)
CVE-2006-4335 (Secunia mirror)
CVE-2006-4336 (Secunia mirror)
CVE-2006-4337 (Secunia mirror)
CVE-2006-6097 (Secunia mirror)
|
|
|
Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS! |
|
|
Description:
VMware has issued an update for VMware ESX Server. This fixes some vulnerabilities, which can be exploited by malicious, local users to gain escalated privileges, and by malicious people to overwrite arbitrary files, cause a DoS (Denial of Service) and potentially compromise a vulnerable system.
For more information:
SA21890
SA21996
SA23115
Additionally, VMware ESX Server was updated to protect against a guest kernel memory corruption, which could cause a DoS and an error within 64bit syscall instruction handling. This, in turn, could cause a panic in 64bit virtual machines.
Solution:
Apply patches. Please see vendor advisory for details.
Original Advisory:
http://kb.vmware.com/kb/5031800
http://kb.vmware.com/kb/5885387
http://kb.vmware.com/kb/6856573
http://kb.vmware.com/kb/3003211
http://kb.vmware.com/kb/3194055
http://kb.vmware.com/kb/3496682
http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/053268.html
Other References:
SA21890:
http://secunia.com/advisories/21890/
SA21996:
http://secunia.com/advisories/21996/
SA23115:
http://secunia.com/advisories/23115/
|
|
|
|
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
|
23 Related Secunia Security Advisories, displaying 10
|
|
|
1. VMware ESX Server update for Tomcat and Java JRE
|
|
2. VMware Products Multiple Vulnerabilities
|
|
3. VMware ESX Server Multiple Security Updates
|
|
4. VMware ESX Server Multiple Security Updates
|
|
5. VMware ESX Server update for libxml2
|
|
6. VMware ESX Server update for e2fsprogs
|
|
7. VMware ESX Server Multiple Updates
|
|
8. VMware ESX Server Multiple Security Updates
|
|
9. VMware ESX Server and VirtualCenter Multiple Security Updates
|
|
10. VMware ESX Server Multiple Security Updates
|
Show all related advisories
|
|
|
Send Feedback to Secunia
|
|
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
|
|
|
|
|
|
Secunia PSI
Scan | Patch | Track
Free Download
|
|
|
Secunia Poll
|
|
|
|
|
 |
|
|
Most Popular Advisories
|
|
|
|
|
|
