Secunia

Description

VMware has acknowledged some vulnerabilities in VMware ESX Server, which can be exploited by malicious, local users to perform certain actions on a vulnerable system with escalated privileges, and malicious people to disclose potentially sensitive information, cause a DoS (Denial of Service), and potentially compromise a vulnerable system.

For more information:
SA15449
SA15949
SA16137
SA16816

Additionally, a VMware internal security audit revealed the following two vulnerabilities:

1) An unspecified double free error can be exploited to cause a DoS, disclose sensitive information and may allow the execution of arbitrary code via unknown vectors.

2) An unspecified buffer overflow can be exploited to cause a DoS or gain escalated privileges via unknown vectors.

Solution
Apply patches.
Further details available in Customer Area

Original Advisory
http://kb.vmware.com/kb/2559638
http://kb.vmware.com/kb/6431040
http://kb.vmware.com/kb/9916286
http://kb.vmware.com/kb/55052
http://kb.vmware.com/kb/1121906
http://kb.vmware.com/kb/3616065
http://kb.vmware.com/kb/55052

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area