The bugs could be exploited to expose sensitive information, bypass security controls or launch a denial-of-service attack, according to vulnerability tracking firm Secunia, which ranked the flaws "moderately critical."
The holes affect the hypervisor-based ESX Server versions 2 and 3.
In September, VMware issued a patch release to correct 13 "highly critical" flaws in the ESX Server. The product allows multiple virtual machines to run on the same physical server.
News of the vulnerabilities come one day after public reports said VMware soon plans to unveil a security initiative -- called VMSafe -- whose goal is to protect machines running on the company's virtualisation software. VMware plans to partner with a number of large IT security players -- including Symantec, McAfee and IBM Internet Security Systems -- on the undertaking.
See original article on scmagazineus.com
VMware patches five holes in ESX Server
Virtualisation software maker VMware on Friday issued fixes for five vulnerabilities in its ESX Server.
Add iTnews as your trusted source
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
.jpg&h=140&w=231&c=1&s=0)
Partner Content
From data overload to decisive action – accelerating decisions with AI agents
.png&h=140&w=231&c=1&s=0)
Partner Content
Is your website a commercial risk (and why it could be without you realising it)?
Promoted Content
How David Jones, Canva and others are putting agentic AI to work
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Protecting the Human Operating System: How Technology Teams Can Perform Under Pressure in an Always-On World
.jpg&w=100&c=1&s=0)
.png&w=100&c=1&s=0)
iTnews State of Security Breakfast Sydney
iTnews Executive Retreat - Security Leaders Edition - VIC
.png&h=140&w=231&c=1&s=0)
.png&h=140&w=231&c=1&s=0)
