VMware Products Multiple Code Execution and Security Bypass Vulnerabilities
Last Update Date:
28 Jan 2011
Release Date:
24 Nov 2009
4539
Views
RISK: Medium Risk
Multiple vulnerabilities have been identified in various VMware products, which could be exploited by remote attackers to bypass security restrictions, disclose sensitive information, cause a denial of service or compromise a vulnerable system. These issues are caused by errors in JRE, Tomcat, ntp, kernel, python, bind, libxml, libxml2, curl, and gnutil.
Impact
- Denial of Service
- Remote Code Execution
- Security Restriction Bypass
- Information Disclosure
System / Technologies affected
- VMware vCenter Server versions 4.x
- VMware VirtualCenter versions 2.x
- VMware Server versions 2.x
- VMware ESX versions 4.x
- VMware ESX versions 3.x
- VMware ESXi versions 4.x
- VMware ESXi versions 3.x
- VMware vMA versions 4.x
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
Apply patches:
http://lists.vmware.com/pipermail/security-announce/2009/000070.html
Vulnerability Identifier
- CVE-2007-2052
- CVE-2007-4965
- CVE-2007-5333
- CVE-2007-5342
- CVE-2007-5461
- CVE-2007-5966
- CVE-2007-6286
- CVE-2008-0002
- CVE-2008-1232
- CVE-2008-1721
- CVE-2008-1887
- CVE-2008-1947
- CVE-2008-2315
- CVE-2008-2370
- CVE-2008-3142
- CVE-2008-3143
- CVE-2008-3144
- CVE-2008-3528
- CVE-2008-4307
- CVE-2008-4864
- CVE-2008-5031
- CVE-2008-5515
- CVE-2008-5700
- CVE-2009-0028
- CVE-2009-0033
- CVE-2009-0159
- CVE-2009-0269
- CVE-2009-0322
- CVE-2009-0580
- CVE-2009-0675
- CVE-2009-0676
- CVE-2009-0696
- CVE-2009-0745
- CVE-2009-0746
- CVE-2009-0747
- CVE-2009-0748
- CVE-2009-0778
- CVE-2009-0781
- CVE-2009-0783
- CVE-2009-0787
- CVE-2009-0834
- CVE-2009-1072
- CVE-2009-1093
- CVE-2009-1094
- CVE-2009-1095
- CVE-2009-1096
- CVE-2009-1097
- CVE-2009-1098
- CVE-2009-1099
- CVE-2009-1100
- CVE-2009-1101
- CVE-2009-1102
- CVE-2009-1103
- CVE-2009-1104
- CVE-2009-1105
- CVE-2009-1106
- CVE-2009-1107
- CVE-2009-1192
- CVE-2009-1252
- CVE-2009-1336
- CVE-2009-1337
- CVE-2009-1385
- CVE-2009-1388
- CVE-2009-1389
- CVE-2009-1439
- CVE-2009-1630
- CVE-2009-1633
- CVE-2009-1895
- CVE-2009-2406
- CVE-2009-2407
- CVE-2009-2414
- CVE-2009-2416
- CVE-2009-2417
- CVE-2009-2625
- CVE-2009-2670
- CVE-2009-2671
- CVE-2009-2672
- CVE-2009-2673
- CVE-2009-2675
- CVE-2009-2676
- CVE-2009-2692
- CVE-2009-2698
- CVE-2009-2716
- CVE-2009-2718
- CVE-2009-2719
- CVE-2009-2720
- CVE-2009-2721
- CVE-2009-2722
- CVE-2009-2723
- CVE-2009-2724
- CVE-2009-2847
- CVE-2009-2848
Source
Related Link
Share with