SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Generic)  >   VMware vCenter Vendors:   VMware
VMware vCenter Server Lets Remote Users Create Large Log Entries and Deny Service
SecurityTracker Alert ID:  1028202
SecurityTracker URL:  http://securitytracker.com/id/1028202
CVE Reference:   CVE-2012-6326   (Links to External Site)
Date:  Feb 22 2013
Impact:   Denial of service via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): 4.1, 5.0; also vCSA 5.0
Description:   A vulnerability was reported in VMware vCenter Server. A remote user can cause denial of service conditions.

A remote user can send specially crafted data to create large log entries and consume all available disk space on the target system volume.

The vCenter Server Appliance (vCSA) is also affected.

Impact:   A remote user can consume all available disk space on the target system volume.
Solution:   The vendor has issued a fix (4.1 Update 3, 5.0 Update 2; vCSA 5.0 Update 2).

The vendor's advisory is available at:

http://www.vmware.com/security/advisories/VMSA-2012-0018.html

Vendor URL:  www.vmware.com/security/advisories/VMSA-2012-0018.html (Links to External Site)
Cause:   Resource error

Message History:   None.


 Source Message Contents



[Original Message Not Available for Viewing]


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2019, SecurityGlobal.net LLC