Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.56118
Categoría:Gentoo Local Security Checks
Título:Gentoo Security Advisory GLSA 200601-04 (VMware)
Resumen:The remote host is missing updates announced in;advisory GLSA 200601-04.
Descripción:Summary:
The remote host is missing updates announced in
advisory GLSA 200601-04.

Vulnerability Insight:
VMware guest operating systems can execute arbitrary code with elevated
privileges on the host operating system through a flaw in NAT networking.

Solution:
All VMware Workstation users should upgrade to a fixed version:

# emerge --sync
# emerge --ask --oneshot --verbose app-emulation/vmware-workstation

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2005-4459
BugTraq ID: 15998
http://www.securityfocus.com/bid/15998
Bugtraq: 20051221 VMware vulnerability in NAT networking (Google Search)
http://www.securityfocus.com/archive/1/420017/100/0/threaded
Bugtraq: 20051221 [Security-Advisories (at) acs-inc (dot) com [email concealed]: [Full-disclosure] [ACSSEC-2005-11-25-0x1] VMWare Workstation 5.5.0 <= build-18007 G SX Server Variants And Others] (Google Search)
http://www.securityfocus.com/archive/1/419997/100/0/threaded
CERT/CC vulnerability note: VU#856689
http://www.kb.cert.org/vuls/id/856689
http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.html
http://www.gentoo.org/security/en/glsa/glsa-200601-04.xml
http://securitytracker.com/id?1015401
http://secunia.com/advisories/18162
http://secunia.com/advisories/18344
http://securityreason.com/securityalert/282
http://securityreason.com/securityalert/289
http://www.vupen.com/english/advisories/2005/3013
CopyrightCopyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.