ID de Prueba:	1.3.6.1.4.1.25623.1.0.105037
Categoría:	VMware Local Security Checks
Título:	VMware ESXi patches address a guest privilege escalation (VMSA-2014-0005)
Resumen:	VMware Workstation, Player, Fusion, and ESXi patches address a; vulnerability in VMware Tools which could result in a privilege escalation on Microsoft Windows 8.1.
Descripción:	Summary: VMware Workstation, Player, Fusion, and ESXi patches address a vulnerability in VMware Tools which could result in a privilege escalation on Microsoft Windows 8.1. Vulnerability Insight: a. Guest privilege escalation in VMware Tools A kernel NULL dereference vulnerability was found in VMware Tools running on Microsoft Windows 8.1. Successful exploitation of this issue could lead to an escalation of privilege in the guest operating system. The vulnerability does not allow for privilege escalation from the Guest Operating System to the host. This means that host memory can not be manipulated from the Guest Operating System. Affected Software/OS: ESXi 5.5 without patch ESXi550-201403102-SG ESXi 5.1 without patch ESXi510-201404102-SG ESXi 5.0 without patch ESXi500-201405102-SG Solution: Apply the missing patch(es). CVSS Score: 5.8 CVSS Vector: AV:A/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3793 Bugtraq: 20140530 NEW VMSA-2014-0005 - VMware Workstation, Player, Fusion, and ESXi patches address a guest privilege escalation (Google Search) http://www.securityfocus.com/archive/1/532236/100/0/threaded http://packetstormsecurity.com/files/126869/VMware-Security-Advisory-2014-0005.html http://www.securitytracker.com/id/1030310 http://www.securitytracker.com/id/1030311 http://secunia.com/advisories/58894
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.