VMware ESXi and ESX Local Privilege Escalation Vulnerability

Released on: 2012-03-31
Updated on: 2012-03-31

Affected Systems:
VMWare ESX Server 4.x
VMWare ESX Server 3.x
VMWare ESXi 4.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 52820
Cve id: CVE-2012-1515

VMware ESX Server is an enterprise-level virtual computer software for any system environment.

VMware ESX Server and VMware ESXi have security vulnerabilities in Port-based I/O processing. Malicious users can modify the read-only memory of a Virtual DOS host.

<* Source: Derek Soeder (dsoeder@eeye.com)

Link: http://secunia.com/advisories/48669/

*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

VMWare
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.vmware.com/security/