CERT mailing list archives

Current Activity - VMware Releases Updates for ESX Service Console Packages


From: Current Activity <us-cert () us-cert gov>
Date: Wed, 1 Sep 2010 10:15:12 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

US-CERT Current Activity

VMware Releases Updates for ESX Service Console Packages

Original release date: September 1, 2010 at 9:32 am
Last revised: September 1, 2010 at 9:32 am


VMware has released security updates for multiple third party packages
for the ESX Service Console. These updates address vulnerabilities in
the perl, krb5, samba, tar, and cpio packages. Exploitation of these
vulnerabilities may allow an attacker to execute arbitrary code, cause
a denial-of-service condition, or bypass security restrictions.

US-CERT encourages users and administrators to review VMware security
advisory VMSA-2010-0013 and apply any necessary updates to help
mitigate the risks.

Relevant Url(s):
<http://lists.vmware.com/pipermail/security-announce/2010/000103.html>

====
This entry is available at
http://www.us-cert.gov/current/index.html#vmware_releases_updates_for_esx

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iQEVAwUBTH5f4D6pPKYJORa3AQIB3wf/YJPS1dZG5P/VxTEP/dFYWjq7OYFqO5Vc
NLz0RpZnZ0lhNy4d19pOHuWO8Y2rHM+dpY7Y+iqYZQk2V85WtgXkf6rmQUnjMHRk
4i+ZHKoVjSCOQcM5DggsCLXSOg+S00rM0mLcJOhtPbsnUHalZLn9MP05ct0YnIEw
lyZK0JDYdCXuu8CwfubqQV8YA5+Z5Et0iIGiJ55XmoWZUskf2zQzmmd3jTqNWabS
+93X9J9rkoHu93qSZ3FDvSiygTHaBNudyd1W9uwfOzvgvuP87F5Jasv6POVAc40A
ZOEuVx+JhON/+70tGv4dea6KeweEgLVwVHyWx8ekLnraysPU6F9sJg==
=raVv
-----END PGP SIGNATURE-----


Current thread: