VMWare GSX Server Authentication Server Buffer Overflow Vulnerability
BID:5294
Info
VMWare GSX Server Authentication Server Buffer Overflow Vulnerability
| Bugtraq ID: | 5294 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 24 2002 12:00AM |
| Updated: | Jul 24 2002 12:00AM |
| Credit: | Discovered by Zag <[email protected]> and Glcs <[email protected]>. |
| Vulnerable: |
VMWare GSX Server 2.0 |
| Not Vulnerable: | |
Discussion
VMWare GSX Server Authentication Server Buffer Overflow Vulnerability
VMWare GSX Server ships with an authentication server. The server is vulnerable to a buffer overflow related to handling of the argument to the "GLOBAL" command. While attackers must be authenticated before the command can be issued, default accounts may exist. This has not been confirmed by VMWare.
This condition may be exploited to execute arbitrary code on the GSX server host. The code likely executes on the underlying, native system and may compromise the host entirely (including all virtual systems).
VMWare GSX Server ships with an authentication server. The server is vulnerable to a buffer overflow related to handling of the argument to the "GLOBAL" command. While attackers must be authenticated before the command can be issued, default accounts may exist. This has not been confirmed by VMWare.
This condition may be exploited to execute arbitrary code on the GSX server host. The code likely executes on the underlying, native system and may compromise the host entirely (including all virtual systems).
Exploit / POC
VMWare GSX Server Authentication Server Buffer Overflow Vulnerability
An exploit is available:
An exploit is available:
Solution / Fix
VMWare GSX Server Authentication Server Buffer Overflow Vulnerability
Solution:
The vendor has released an update. Users are advised to download and install this update for VMware GSX Server 2.0. Further information may be found on the following web site:
http://www.vmware.com/download/gsx_security.html
VMWare GSX Server 2.0
Solution:
The vendor has released an update. Users are advised to download and install this update for VMware GSX Server 2.0. Further information may be found on the following web site:
http://www.vmware.com/download/gsx_security.html
VMWare GSX Server 2.0
-
VMWare vmware-authd.zip
http://www.vmware.com/download1/software/support/vmware-authd.zip
References
VMWare GSX Server Authentication Server Buffer Overflow Vulnerability
References:
References: