 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| Test ID: | 1.3.6.1.4.1.25623.1.0.801320 |
| Category: | General |
| Title: | VMware Products 'vmware-vmx' Information Disclosure Vulnerability (VMSA-2010-0007) - Windows |
| Summary: | VMware products are prone to an information disclosure vulnerability. |
| Description: | Summary: VMware products are prone to an information disclosure vulnerability. Vulnerability Insight: The flaw is due to error in 'virtual networking stack' when interacting between the guest OS and host 'vmware-vmx' process, which allows attackers to obtain sensitive information from memory on the host OS by examining received network packets. Vulnerability Impact: Successful exploitation will allow attacker to disclose potentially sensitive information. Affected Software/OS: VMware Server 2.x VMware Player 3.0 before 3.0.1 build 227600 VMware Player 2.5.x before 2.5.4 build 246459 VMware Workstation 7.0 before 7.0.1 build 227600 VMware Workstation 6.5.x before 6.5.4 build 246459 VMware ACE 2.6 before 2.6.1 build 227600 and 2.5.x before 2.5.4 build 246459 Solution: Apply the updates provided by the vendor. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N |
| Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2010-1138 BugTraq ID: 39395 http://www.securityfocus.com/bid/39395 Bugtraq: 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues (Google Search) http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html http://security.gentoo.org/glsa/glsa-201209-25.xml http://lists.vmware.com/pipermail/security-announce/2010/000090.html http://osvdb.org/63607 http://www.securitytracker.com/id?1023836 http://secunia.com/advisories/39203 http://secunia.com/advisories/39206 http://secunia.com/advisories/39215 |
| Copyright | Copyright (C) 2010 Greenbone Networks GmbH |
| This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |