21 October 2009, 09:36
VMware patches vulnerabilities in its products
VMware has released updates for its ESX Server to fix vulnerabilities in the DHCP Client, DHCP Server, Service Console kernel and Java Runtime Environment (JRE). The security announcement lists a total of 48 CVE entries. The vulnerabilities can be exploited to carry out denial-of-service (DoS) attacks or to compromise systems.
Whilst the bugs in the Service Console kernel and JRE can only be exploited when an attacker has access to the console or console network, attackers can penetrate the ESX Server's DHCP client via a normal LAN.
vCenter, VirtualCenter and Server 2.0 are also affected by the vulnerabilities in DHCP and JRE. However, VMware is still working on patches for these products
See also:
- VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues , security advisory from VMware.
(crve)
Print Version | Send by email
| Permalink: http://h-online.com/-834855
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/6/7/2/comingin310_4_kicker-4977194bfb0de0d7.png)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/3/2/3/comingin310_3_kicker-151cd7b9e9660f05.png)
