VMware has acknowledged multiple vulnerabilities in VMware ESX Server, which can be exploited by malicious, local users to disclose potentially sensitive information, perform certain actions with escalated privileges, and cause a DoS (Denial of Service) and by malicious people to manipulate certain data, bypass certain restrictions, and cause a DoS (Denial of Service).

For more information:
SA40028
SA40978
SA41654
SA42088
SA42374
SA42435

The vulnerabilities are reported in versions 4.0 and 4.1.

Solution
Apply patches (please see the vendor's advisory for details).
Changelog
Further details available to Secunia VIM customers

Original Advisory
VMSA-2011-0004:
http://www.vmware.com/security/advisories/VMSA-2011-0004.html

VMSA-2012-0001:
http://www.vmware.com/security/advisories/VMSA-2012-0001.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers