Multiple security vulnerabilities in VMware ESX Server/VirtualCenter JRE

Release date:
Updated on: 2012-03-12

Affected Systems:
VMWare ESX Server 3.x
VMWare VirtualCenter 2.x
Description:
--------------------------------------------------------------------------------
Cve id: CVE-2011-3389, CVE-2011-3516, CVE-2011-3521, CVE-2011-3544, CVE-2011-3545, CVE-2011-3546, CVE-2011-3547, CVE-2011-3548, CVE-2011-3549, CVE-2011-3550, CVE-2011-3551, CVE-2011-3552, CVE-2011-3553, CVE-2011-3554, CVE-2011-3555, CVE-2011-3556, CVE-2011-3560, CVE-2011-3561

VMware ESX Server is an enterprise-level virtual computer software for any system environment.

ESX Server and VirtualCenter have multiple vulnerabilities in implementation, attackers can exploit this vulnerability to expose sensitive information, hijack user sessions, perform DNS poisoning attacks, operate on certain data, and cause access denial and control of user systems.

<* Source: vendor

Link: http://secunia.com/advisories/48335/

*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

VMWare
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.vmware.com/security/