SR10-091 VMware - Flera sårbarheter i VMware
Flera sårbarheter finns i VMware, de allvarligaste i "vMA, krb5" och "ESX, krb5".Problembeskrivning
CVE-referens: -
Flera sårbarheter finns i VMware blandannat i "vMA, krb5", "ESX, krb5" som kan utnyttjas av en angripare för att få till gång till systemet och känslig information samt utföra en överbelastningsattack.
Se nedan för information om alla sårbarheter.
Påverkade versioner
-
VMware VMA 4.x
-
VMware ESX Server 2.x
-
VMware ESX Server 3.x
-
VMware ESXi 3.x
-
VMware ESXi 4.x
Mer information och programrättningar
VMware vMA Multiple krb5 Vulnerabilities
http://secunia.com/advisories/39977/
VMware ESX Multiple krb5 Vulnerabilities
http://secunia.com/advisories/39973/
VMware ESX gzip "unlzw()" Integer Underflow Vulnerability
http://secunia.com/advisories/39975/
VMware vMA ISC BIND DNSSEC CNAME / DNAME and NXDOMAIN Cache Poisoning
http://secunia.com/advisories/39978/
VMware vMA kernel Multiple Vulnerabilities
http://secunia.com/advisories/39920/
VMware ESXi ntp Mode 7 Request Denial of Service
http://secunia.com/advisories/39972/
VMware ESX GCC libtool Search Path Privilege Escalation Security Issue
http://secunia.com/advisories/39974/
VMware vMA OpenSSL "CRYPTO_free_all_ex_data()" Memory Leak Vulnerability
http://secunia.com/advisories/39976/
VMware vMA GCC libtool Search Path Privilege Escalation Security Issue
http://secunia.com/advisories/39979/
VMware vMA gzip "unlzw()" Integer Underflow Vulnerability
http://secunia.com/advisories/39980/
VMware vMA sudo Privilege Escalation Security Issues
http://secunia.com/advisories/39981/
VMware ESXi update for ntp
http://secunia.com/advisories/39971/
![[CERT-SE]](http://www.cert.se/headerimages/certlogo.png)
![[MSB]](++resource++go
vcert.theme.images/msbLogo.png)
![[FiRST][TI]](++resource++govcert.theme.images/logos.gif)