AusCERT - ESB-2012.0498 - [VMware ESX] VMware vMA: Increased privileges

HOME
About AusCERT
Membership
PKI Services
Publications
Sec. Bulletins
Conferences
News & Media
Services
Web Log
Site Map
Site Help
Member login
ESB-2012.0498 - [VMware ESX] VMware vMA: Increased privileges - Unknown/unspecified
Date: 28 May 2012

Click here for printable version
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2012.0498
                   VMware vMA addresses a security issue
                                28 May 2012

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           VMware vMA 4.0
                   VMware vMA 4.1
                   VMware vMA patch 1 (5.0.0.1)
Publisher:         VMware
Operating System:  VMWare ESX Server
Impact/Access:     Increased Privileges -- Unknown/Unspecified
Resolution:        Patch/Upgrade
CVE Names:         CVE-2012-2752  

Original Bulletin: 
   http://www.vmware.com/au/support/support-resources/advisories/VMSA-2012-0010.html

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 -----------------------------------------------------------------------
                   VMware Security Advisory

Advisory ID: VMSA-2012-0010
Synopsis:    VMware vMA addresses a security issue
Issue date:  2012-05-25
Updated on:  2012-05-25 (initial advisory)
CVE number:  CVE-2012-2752
 -----------------------------------------------------------------------
1. Summary

   VMware vMA addresses a security issue

2. Relevant releases

   vMA 4.0 
   vMA 4.1 
   vMA 5 patch 1 (5.0.0.1)
   
3. Problem Description

 a. VMware Library file loading Privilege Escalation

    A flaw in the way library files are loaded could allow for privilege 
    escalation. 

    VMware would like to thank Thorsten TÃ¼llmann for 
    reporting this issue to us.
 
    The Common Vulnerabilities and Exposures project (cve.mitre.org) has
    assigned the name CVE-2012-2752 to this issue.

    Column 4 of the following table lists the action required to
    remediate the vulnerability in each release, if a solution is
    available.

    VMware         Product   Running  Replace with/
    Product        Version   on       Apply Patch
    =============  ========  =======  =================
    vMA            any       any      vMA 5.0 Patch 2 (5.0.0.2)*

    * Customers who are running vMA 4.0 and vMA 4.1 would need to
      update to vMA 5.0 Patch 2 (5.0.0.2) to remediate this issue.

4. Solution

   Please review the patch/release notes for your product and
   version and verify the checksum of your downloaded file.

   vMA 5.0
   --------
   vMA-5.0.0.2-724898.zip

   md5sum: 3537169e177d5ddf987926b428fffb20
   sha1sum: 6720cb255109d3a93be5a3af6c35fd9efae7261a

   http://kb.vmware.com/kb/2021164


   
5. References

   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2752

 -----------------------------------------------------------------------

6. Change log

   2012-05-25 VMSA-2012-0010
   Initial security advisory in conjunction with the release of 
    vMA 5.0 patch 2 (5.0.0.2)on 2012-05-25.

 -----------------------------------------------------------------------

7. Contact

E-mail list for product security notifications and announcements:
http://lists.vmware.com/cgi-bin/mailman/listinfo/security-announce

This Security Advisory is posted to the following lists:

  * security-announce at lists.vmware.com
  * bugtraq at securityfocus.com
  * full-disclosure at lists.grok.org.uk

E-mail:  security at vmware.com
PGP key at: http://kb.vmware.com/kb/1055

VMware Security Advisories
http://www.vmware.com/security/advisories

VMware security response policy
http://www.vmware.com/support/policies/security_response.html

General support life cycle policy
http://www.vmware.com/support/policies/eos.html

VMware Infrastructure support life cycle policy
http://www.vmware.com/support/policies/eos_vi.html

Copyright 2012 VMware Inc.  All rights reserved.

- -----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 10.2.0 (Build 2599)
Charset: utf-8

wj8DBQFPv5lKDEcm8Vbi9kMRAkwfAJoD1Num5t9esuPOKgoqsUR4uTf+jwCfRkWk
bvc+thG8ltUhrcCj8FMTo44=
=Rw/7
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        http://www.auscert.org.au/render.html?cid=1980

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
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=5z5K
-----END PGP SIGNATURE-----