Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.801320
Category:General
Title:VMware Products 'vmware-vmx' Information Disclosure Vulnerability (Windows)
Summary:The host is installed with VMWare products and are prone to; information disclosure vulnerability.
Description:Summary:
The host is installed with VMWare products and are prone to
information disclosure vulnerability.

Vulnerability Insight:
The flaw is due to error in 'virtual networking stack' when interacting between the
guest OS and host 'vmware-vmx' process, which allows attackers to obtain sensitive
information from memory on the host OS by examining received network packets.

Vulnerability Impact:
Successful exploitation will allow attacker to disclose potentially sensitive
information.

Affected Software/OS:
VMware Server 2.x,
Vmware Player 3.0 before 3.0.1 build 227600,
VMware Player 2.5.x before 2.5.4 build 246459,
VMware Workstation 7.0 before 7.0.1 build 227600,
VMware Workstation 6.5.x before 6.5.4 build 246459 and
VMware ACE 2.6 before 2.6.1 build 227600 and 2.5.x before 2.5.4 build 246459

Solution:
Apply updates.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N

Cross-Ref: BugTraq ID: 39395
Common Vulnerability Exposure (CVE) ID: CVE-2010-1138
http://www.securityfocus.com/bid/39395
Bugtraq: 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues (Google Search)
http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html
http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
http://security.gentoo.org/glsa/glsa-201209-25.xml
http://lists.vmware.com/pipermail/security-announce/2010/000090.html
http://osvdb.org/63607
http://www.securitytracker.com/id?1023836
http://secunia.com/advisories/39203
http://secunia.com/advisories/39206
http://secunia.com/advisories/39215
CopyrightCopyright (c) 2010 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.