Thread-topic: [SA22875] VMware ESX Server Multiple Vulnerabilities
>
> TITLE:
> VMware ESX Server Multiple Vulnerabilities
>
> SECUNIA ADVISORY ID:
> SA22875
>
> VERIFY ADVISORY:
>
>
> CRITICAL:
> Moderately critical
>
> IMPACT:
> Security Bypass, Exposure of sensitive information, DoS, System
> access
>
> WHERE:
> From remote
>
> OPERATING SYSTEM:
> VMware ESX Server 2.x
>
>
> DESCRIPTION:
> Some vulnerabilities, security issues, and a weakness have been
> reported in VMware ESX Server, which can be exploited by malicious,
> local users to bypass certain security restrictions and disclose
> potentially sensitive information, or by malicious people to cause a
> DoS (Denial of Service) and potentially compromise a vulnerable
> system.
>
> For more information:
> SA15930
> SA16793
> SA19357
> SA19657
> SA19724
> SA19869
> SA20100
> SA20980
>
> This also fixes a security issue is OpenSSH, which is caused due to
> an error in signaling child processes to terminate after the
> LoginGraceTime period has expired. This may be exploited to cause a
> DoS by preventing the daemon from accepting new connections.
>
> SOLUTION:
> VMware ESX Server 2.0.2:
> Apply Upgrade Patch 2
>
> VMware ESX Server 2.1.3:
> Apply Upgrade Patch 2
>
> VMware ESX Server 2.5.3:
> Apply Upgrade Patch 4 (do not apply this patch to SunFire X4100 or
> X4200 servers).
>
> VMware ESX Server 2.5.4:
> Apply Upgrade Patch 1
>
> PROVIDED AND/OR DISCOVERED BY:
> Reported by the vendor.
>
> ORIGINAL ADVISORY:
>
>
>
>
>
> OTHER REFERENCES:
> SA15930:
>
>
> SA16793:
>
>
> SA19357:
>
>
> SA19657:
>
>
> SA19724:
>
>
> SA19869:
>
>
> SA20100:
>
>
> SA20980:
>
>
