| Descripción: | Summary:
The remote ESXi is missing one or more security related Updates from VMSA-2011-0004.3.
Vulnerability Insight:
Service Location Protocol daemon (SLPD) denial of service issue and ESX 4.0 Service Console OS (COS) updates
for bind, pam, and rpm.
a. Service Location Protocol daemon DoS
This patch fixes a denial-of-service vulnerability in the Service Location Protocol daemon (SLPD).
b. Service Console update for bind
This patch updates the bind-libs and bind-utils RPMs to version 9.3.6-4.P1.el5_5.3, which resolves multiple security
issues.
c. Service Console update for pam
This patch updates the pam RPM to pam_0.99.6.2-3.27.5437.vmw, which resolves multiple security issues with PAM modules.
d. Service Console update for rpm, rpm-libs, rpm-python, and popt
This patch updates rpm, rpm-libs, and rpm-python RPMs to 4.4.2.3-20.el5_5.1, and popt to version 1.10.2.3-20.el5_5.1, which
resolves a security issue.
Vulnerability Impact:
a. Service Location Protocol daemon DoS
Exploitation of this vulnerability could cause SLPD to consume significant CPU resources.
Affected Software/OS:
VMware ESXi 4.1 without patch ESXi410-201101201-SG
VMware ESXi 4.0 without patch ESXi400-201103401-SG
VMware ESX 4.1 without patches ESX410-201101201-SG, ESX410-201104407-SG and ESX410-201110207-SG
VMware ESX 4.0 without patches ESX400-201103401-SG, ESX400-201103404-SG, ESX400-201103406-SG and ESX400-201103407-SG
Solution:
Apply the missing patch(es).
CVSS Score:
7.2
CVSS Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
