Educause Security Discussion mailing list archives

VMWare Vulnerability


From: Mike Lococo <mike.lococo () NYU EDU>
Date: Fri, 21 Sep 2007 12:53:55 -0400

Hi Folks,

Has anyone found any additional information on the recent VMWare
updates?  They claim to patch a potential guest escape in ESX Server
discovered by Rafal Wojtczvk from McAfee, which is the first such
vulnerability found to my knowledge.  The vulnerability also applies to
WS and Server, which some security folks use to do malware testing.

It might be worth pinging folks on your campus that you know use VMWare,
and if more information is available than is contained in the VMWare
announcement it would be great to see it:

http://permalink.gmane.org/gmane.comp.security.full-disclosure/55609

Thanks,
Mike Lococo

Current thread: