ID de Prueba:	1.3.6.1.4.1.25623.1.0.103662
Categoría:	VMware Local Security Checks
Título:	VMware ESXi/ESX VMCI privilege escalation vulnerability (VMSA-2013-0002)
Resumen:	The remote ESXi is missing one or more security related Updates from VMSA-2013-0002.
Descripción:	Summary: The remote ESXi is missing one or more security related Updates from VMSA-2013-0002. Vulnerability Insight: a. VMware VMCI privilege escalation VMware ESX, Workstation, Fusion, and View contain a vulnerability in the handling of control code in vmci.sys. A local malicious user may exploit this vulnerability to manipulate the memory allocation through the Virtual Machine Communication Interface (VMCI) code. This could result in a privilege escalation on Windows-based hosts and on Windows-based Guest Operating Systems. The vulnerability does not allow for privilege escalation from the Guest Operating System to the host (and vice versa). This means that host memory can not be manipulated from the Guest Operating System (and vice versa). Systems that have VMCI disabled are also affected by this issue. Affected Software/OS: VMware ESXi 5.1 without ESXi510-201212102-SG VMware ESXi 5.0 without ESXi500-201212102-SG VMware ESXi 4.1.without ESXi410-201211402-BG VMware ESXi 4.0 without ESXi400-201302402-SG VMware ESX 4.1.without ESX410-201211401-SG VMware ESX 4.0 without ESX400-201302401-SG Solution: Apply the missing patch(es). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1406 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17164
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.