Description

VMware has acknowledged multiple vulnerabilities in VMware ESX and ESXi Server, which can be exploited by malicious, local users to disclose system information, cause a DoS (Denial of Service), and gain escalated privileges and by malicious people with physical access to potentially compromise a vulnerable system and cause a DoS (Denial of Service), and by malicious people to disclose potentially sensitive information, conduct spoofing attacks, bypass certain security features, and cause a DoS (Denial of Service).

1) Multiple vulnerabilities exist in the Service Console kernel.

For more information:
SA27555
SA28696
SA35093
SA38499
SA38601
SA39080
SA39490
SA40205
SA41002
SA41245
SA41284
SA41440
SA41493
SA41650
SA42035
SA42061
SA42126
SA42128
SA42187
SA42354
SA42372
SA42395
SA42422
SA42570
SA43009
SA43594

2) Multiple vulnerabilities exist in Kerberos (krb5-libs and krb5-workstation).

For more information:
SA42396
SA43260

3) Multiple vulnerabilities exist in the GNU C Library.

For more information:
SA43492
SA43976
SA44353

4) Some errors in the mptsas, mpt2sas, and mptspi drivers can be exploited to corrupt memory.

Solution
Apply patches if available.
Further details available to Secunia VIM customers

Changelog
Further details available to Secunia VIM customers

Original Advisory
VMware (VMSA-2011-0012, VMSA-2011-0012.1, VMSA-2011-00012.2):
http://www.vmware.com/security/advisories/VMSA-2011-0012.html
http://lists.vmware.com/pipermail/security-announce/2011/000154.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers