CERT mailing list archives

Current Activity - VMware Releases Security Advisory


From: Current Activity <us-cert () us-cert gov>
Date: Mon, 6 Jun 2011 08:52:28 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

US-CERT Current Activity

VMware Releases Security Advisory

Original release date: June 6, 2011 at 7:55 am
Last revised: June 6, 2011 at 7:55 am


VMware has released security advisory VMSA-2011-0009 to address
multiple vulnerabilities in the following products:
  * VMware Workstation 7.1.3 and earlier
  * VMware Player 3.1.3 and earlier
  * VMware Fusion 3.1.2 and earlier
  * ESXi 4.1 without patch ESXi410-201104402-BG
  * ESXi 4.0 without patch ESXi400-201104402-BG
  * ESXi 3.5 without patches ESXe350-201105401-I-SG and
    ESXe350-201105402-T-SG
  * ESX 4.1 without patch ESX410-201104401-SG
  * ESX 4.0 without patch ESX400-201104401-SG
  * ESX 3.5 without patches ESX350-201105401-SG, ESX350-201105404-SG,
    and ESX350-201105406-SG

Exploitation of these vulnerabilities may allow an attacker to execute
arbitrary code, cause a denial-of-service condition, bypass security
mechanisms, operate with elevated privileges, or obtain sensitive
information.

US-CERT encourages users and administrators to review VMware security
advisory VMSA-2011-0009 and apply any necessary updates to help
mitigate the risks.

Relevant Url(s):
<http://lists.vmware.com/pipermail/security-announce/2011/000141.html>

====
This entry is available at
http://www.us-cert.gov/current/index.html#vmware_releases_security_advisory4

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iQEVAwUBTezNfT6pPKYJORa3AQJktQgAkJ22gmUIiisjwapk4Qz3rIN8CLkzzIoi
WDUFa3rLzOBBO4DQx9XvkZiNZ1xxgI2C8uVaO1HIe0CBEwJpIwjvlb/aqHMdMUUL
QAC67pwTkFXXisj2vtnobzfcEt2w18pEJVIgdHMWryjhgyu7NMsl+styo6XU/Klv
0x6hlRlcJ9mPziTJ4rN0jo3PU+N8l3H8owGXPmEFTuooo6BRCdA0rN9rJG8y37PB
lYiwQFJB6o3jDg7dwwSKJapXQxkqsYJOd5e6JXnJYdjv1oUFSnZU4E1TwUpuqBs8
0GeZ+41QiGZSRIUs5bX/oVf/q24CUAfdglGK1sKvktqRQ+RBJkwR3Q==
=UkfT
-----END PGP SIGNATURE-----


Current thread: