Executive Summary

Summary
TitleVMware product updates address critical and important security issues
Informations
NameVMSA-2016-0005First vendor Publication2016-05-17
VendorVMwareLast vendor Modification2016-11-22
Severity (Vendor) N/ARevision5

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score10Attack RangeNetwork
Cvss Impact Score10Attack ComplexityLow
Cvss Expoit Score10AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

a. Critical JMX issue when deserializing authentication credentials

The RMI server of Oracle JRE JMX deserializes any class when deserializing authentication credentials. This may allow a remote, unauthenticated attacker to cause deserialization flaws and execute their commands.

Workarounds CVE-2016-3427

vCenter Server Apply the steps of VMware Knowledge Base article 2145343 to vCenter Server 6.0 on Windows. See the table below for the specific vCenter Server 6.0 versions on Windows this applies to.

vCloud Director No workaround identified

vSphere Replication No workaround identified

vRealize Operations Manager (non-appliance) The non-appliance version of vRealize Operations Manager (vROps), which can be installed on Windows and Linux has no default firewall. In order to remove the remote exploitation possibility, access to the following external ports will need to be blocked on the system where the non-appliance version of vROps is installed: - vROps 6.2.x: port 9004, 9005, 9006, 9007, 9008 - vROps 6.1.x: port 9004, 9005, 9007, 9008 - vROps 6.0.x: port 9004, 9005 Note: These ports are already blocked by default in the appliance version of vROps.

vRealize Infrastructure Navigator No workaround identified

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2016-3427 to this issue.

b. Important VMware Workstation and Player for Windows host privilege escalation vulnerability.

VMware Workstation and Player for Windows do not properly reference one of their executables. This may allow a local attacker on the host to elevate their privileges.

VMware would like to thank Andrew Smith of Sword & Shield Enterprise Security for reporting this issue to us.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2016-2077 to this issue.

Original Source

Url : http://www.vmware.com/security/advisories/VMSA-2016-0005.html

CWE : Common Weakness Enumeration

%idName
100 %CWE-264Permissions, Privileges, and Access Controls

CPE : Common Platform Enumeration

TypeDescriptionCount
Application3
Application3
Application1
Application4
Application4
Os1

Nessus® Vulnerability Scanner

DateDescription
2017-03-08Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2017-0455.nasl - Type : ACT_GATHER_INFO
2017-03-08Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2017-0456.nasl - Type : ACT_GATHER_INFO
2016-12-21Name : The remote device is missing a vendor-supplied security patch.
File : f5_bigip_SOL73112451.nasl - Type : ACT_GATHER_INFO
2016-08-19Name : A message queuing service installed on the remote host is affected by multipl...
File : websphere_mq_swg21982566.nasl - Type : ACT_GATHER_INFO
2016-07-19Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-1430.nasl - Type : ACT_GATHER_INFO
2016-06-28Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201606-18.nasl - Type : ACT_GATHER_INFO
2016-06-24Name : A virtualization appliance installed on the remote host is affected by a remo...
File : vmware_vcloud_director_vmsa-2016-0005.nasl - Type : ACT_GATHER_INFO
2016-06-03Name : The remote host is a virtualization appliance that is affected by a remote co...
File : vmware_vsphere_replication_vmsa_2016_0005.nasl - Type : ACT_GATHER_INFO
2016-05-26Name : The remote host is affected by a remote code execution vulnerability.
File : vmware_vrealize_operations_manager_VMSA_2016_0005.nasl - Type : ACT_GATHER_INFO
2016-05-25Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-1388-1.nasl - Type : ACT_GATHER_INFO
2016-05-25Name : A virtualization management application installed on the remote host is affec...
File : vmware_vcenter_vmsa-2016-0005.nasl - Type : ACT_GATHER_INFO
2016-05-24Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-1378-1.nasl - Type : ACT_GATHER_INFO
2016-05-24Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-1379-1.nasl - Type : ACT_GATHER_INFO
2016-05-18Name : A virtualization application installed on the remote host is affected by a pr...
File : vmware_player_priv_esc_vmsa_2016_0005.nasl - Type : ACT_GATHER_INFO
2016-05-18Name : A virtualization application installed on the remote host is affected by a pr...
File : vmware_workstation_priv_esc_vmsa_2016_0005.nasl - Type : ACT_GATHER_INFO
2016-05-16Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-1299-1.nasl - Type : ACT_GATHER_INFO
2016-05-16Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-1300-1.nasl - Type : ACT_GATHER_INFO
2016-05-12Name : The remote AIX host has a version of Java SDK installed that is affected by m...
File : aix_java_april2016_advisory.nasl - Type : ACT_GATHER_INFO
2016-05-12Name : The remote Amazon Linux AMI host is missing a security update.
File : ala_ALAS-2016-700.nasl - Type : ACT_GATHER_INFO
2016-05-12Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-1039.nasl - Type : ACT_GATHER_INFO
2016-05-12Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-2972-1.nasl - Type : ACT_GATHER_INFO
2016-05-11Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2016-0723.nasl - Type : ACT_GATHER_INFO
2016-05-11Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2016-0723.nasl - Type : ACT_GATHER_INFO
2016-05-11Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-0723.nasl - Type : ACT_GATHER_INFO
2016-05-11Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20160509_java_1_6_0_openjdk_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2016-05-09Name : The remote openSUSE host is missing a security update.
File : openSUSE-2016-572.nasl - Type : ACT_GATHER_INFO
2016-05-09Name : The remote openSUSE host is missing a security update.
File : openSUSE-2016-573.nasl - Type : ACT_GATHER_INFO
2016-05-09Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-1248-1.nasl - Type : ACT_GATHER_INFO
2016-05-09Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-1250-1.nasl - Type : ACT_GATHER_INFO
2016-05-05Name : The remote openSUSE host is missing a security update.
File : openSUSE-2016-553.nasl - Type : ACT_GATHER_INFO
2016-05-05Name : The remote openSUSE host is missing a security update.
File : openSUSE-2016-554.nasl - Type : ACT_GATHER_INFO
2016-05-05Name : The remote openSUSE host is missing a security update.
File : openSUSE-2016-560.nasl - Type : ACT_GATHER_INFO
2016-05-05Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-2963-1.nasl - Type : ACT_GATHER_INFO
2016-05-05Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-2964-1.nasl - Type : ACT_GATHER_INFO
2016-05-04Name : The remote Debian host is missing a security update.
File : debian_DLA-451.nasl - Type : ACT_GATHER_INFO
2016-05-04Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-0716.nasl - Type : ACT_GATHER_INFO
2016-05-03Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-0708.nasl - Type : ACT_GATHER_INFO
2016-05-02Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-0701.nasl - Type : ACT_GATHER_INFO
2016-05-02Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-0702.nasl - Type : ACT_GATHER_INFO
2016-04-29Name : The remote Amazon Linux AMI host is missing a security update.
File : ala_ALAS-2016-693.nasl - Type : ACT_GATHER_INFO
2016-04-27Name : The remote Debian host is missing a security-related update.
File : debian_DSA-3558.nasl - Type : ACT_GATHER_INFO
2016-04-22Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2016-0675.nasl - Type : ACT_GATHER_INFO
2016-04-22Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2016-0676.nasl - Type : ACT_GATHER_INFO
2016-04-22Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-0675.nasl - Type : ACT_GATHER_INFO
2016-04-22Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-0676.nasl - Type : ACT_GATHER_INFO
2016-04-22Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-0677.nasl - Type : ACT_GATHER_INFO
2016-04-22Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-0678.nasl - Type : ACT_GATHER_INFO
2016-04-22Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-0679.nasl - Type : ACT_GATHER_INFO
2016-04-22Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20160421_java_1_7_0_openjdk_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2016-04-22Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20160421_java_1_7_0_openjdk_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2016-04-22Name : The remote Amazon Linux AMI host is missing a security update.
File : ala_ALAS-2016-688.nasl - Type : ACT_GATHER_INFO
2016-04-22Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2016-0650.nasl - Type : ACT_GATHER_INFO
2016-04-22Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2016-0651.nasl - Type : ACT_GATHER_INFO
2016-04-22Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2016-0675.nasl - Type : ACT_GATHER_INFO
2016-04-22Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2016-0676.nasl - Type : ACT_GATHER_INFO
2016-04-21Name : The remote Windows host contains a programming platform that is affected by m...
File : oracle_java_cpu_apr_2016.nasl - Type : ACT_GATHER_INFO
2016-04-21Name : The remote Unix host contains a programming platform that is affected by mult...
File : oracle_java_cpu_apr_2016_unix.nasl - Type : ACT_GATHER_INFO
2016-04-21Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2016-0650.nasl - Type : ACT_GATHER_INFO
2016-04-21Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2016-0651.nasl - Type : ACT_GATHER_INFO
2016-04-21Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-0650.nasl - Type : ACT_GATHER_INFO
2016-04-21Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2016-0651.nasl - Type : ACT_GATHER_INFO
2016-04-21Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20160420_java_1_8_0_openjdk_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2016-04-21Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20160420_java_1_8_0_openjdk_on_SL7_x.nasl - Type : ACT_GATHER_INFO
2016-04-20Name : A programming platform installed on the remote Windows host is affected by mu...
File : oracle_jrockit_cpu_apr_2016.nasl - Type : ACT_GATHER_INFO
2016-01-21Name : The remote OracleVM host is missing one or more security updates.
File : oraclevm_OVMSA-2016-0005.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
DateInformations
2016-11-22 21:21:18
  • Multiple Updates
2016-06-25 13:27:14
  • Multiple Updates
2016-06-15 09:24:17
  • Multiple Updates
2016-06-04 13:27:52
  • Multiple Updates
2016-06-04 05:25:03
  • Multiple Updates
2016-06-01 13:28:02
  • Multiple Updates
2016-05-27 21:22:04
  • Multiple Updates
2016-05-26 13:27:47
  • Multiple Updates
2016-05-25 13:21:22
  • Multiple Updates
2016-05-19 13:27:02
  • Multiple Updates
2016-05-18 21:39:29
  • Multiple Updates
2016-05-17 13:26:20
  • First insertion