«
Expand/Collapse
215 items tagged "vmware"
Related tags:
workstation [+],
vcenter [+],
update [+],
privilege escalation vulnerability [+],
local privilege escalation [+],
code execution [+],
vmware workstation [+],
txt [+],
vmsa [+],
hypervisor [+],
hosted [+],
code [+],
security [+],
player [+],
advisory [+],
third party [+],
party updates [+],
party [+],
manager [+],
jetty web [+],
information disclosure vulnerability [+],
hijacking [+],
esxi [+],
dll [+],
directory traversal [+],
backdoor [+],
authentication [+],
Support [+],
General [+],
security advisory [+],
webaccess [+],
vma [+],
virtual machine [+],
view [+],
user [+],
studio [+],
service vulnerability [+],
security vulnerabilities [+],
quot [+],
privilege elevation [+],
high bandwidth [+],
exploits [+],
critical security [+],
esx [+],
workstation version [+],
web server component [+],
vmx [+],
vmware server [+],
vm tools [+],
view 3 [+],
video file [+],
vi client [+],
sun jre [+],
stack pointer [+],
service updates [+],
service privilege [+],
service location protocol [+],
server password [+],
rom [+],
retired [+],
remote [+],
product updates [+],
privilege [+],
patches [+],
patch updates [+],
openldap packages [+],
obfuscation [+],
libxml2 [+],
kernel update [+],
kernel code [+],
information disclosure [+],
host kernel [+],
format string [+],
form [+],
disclosure [+],
denial [+],
command [+],
cisco nexus [+],
chargeback [+],
arbitrary code execution [+],
zip [+],
workstation versions [+],
windows [+],
vmware player [+],
vmware mount [+],
vmnc [+],
virtual windows [+],
virtual network [+],
virtual [+],
url [+],
traversal [+],
temporary files [+],
temporary [+],
site [+],
server directory [+],
scoopyng [+],
products directory [+],
problem [+],
party libraries [+],
network stack [+],
network [+],
nat [+],
multiple [+],
laptop [+],
lan [+],
jetty [+],
jerry [+],
internet [+],
heap [+],
fusion [+],
dsecrg [+],
directory [+],
detection mechanisms [+],
cross site scripting [+],
console [+],
com [+],
codec [+],
bugtraq [+],
buffer overflow vulnerability [+],
bt4 [+],
alliances [+],
acpid [+],
Software [+],
Related [+],
Issues [+],
vulnerability [+],
denial of service [+],
wpa [+],
work [+],
wlassistant [+],
wireshark [+],
wireless lan cards [+],
wireless lan card [+],
wireless connections [+],
wireless adapters [+],
wireless adapter [+],
windows updates [+],
window button [+],
window [+],
wifi [+],
wep [+],
weird reason [+],
vulnerabilities [+],
vmware virtualcenter [+],
vmware esx [+],
virtualcenter [+],
usb [+],
url forwarding [+],
unspecified [+],
und [+],
thank [+],
texas instruments pci 1410 [+],
texas [+],
sudo [+],
source code [+],
sound architecture [+],
sophos [+],
showcases [+],
setup [+],
security support [+],
security hole [+],
scanner module [+],
response [+],
resolution [+],
question [+],
pwned [+],
prototype [+],
program settings [+],
problem thanks [+],
pre [+],
ping [+],
penetration [+],
party library [+],
party component [+],
parallels [+],
packet [+],
overflow vulnerability [+],
overflow [+],
orchestrator [+],
operating system [+],
openldap [+],
ntpd [+],
network cards [+],
n draft [+],
movie [+],
mount [+],
module [+],
metasploit [+],
memory corruption [+],
memory [+],
malaysia [+],
machine [+],
mac [+],
lt 2 [+],
linux [+],
library reference [+],
konsole [+],
kernel [+],
justin morehouse [+],
jre [+],
john [+],
jmx [+],
ipadress [+],
integer overflow [+],
information leakage [+],
information leak [+],
important security [+],
imagem [+],
image html [+],
image [+],
howtos [+],
how [+],
hostos [+],
hey [+],
hextile [+],
heap memory [+],
hack in the box [+],
glib library [+],
gigabit network [+],
final 4 [+],
file [+],
execution [+],
evasion [+],
ettercap [+],
dhcp [+],
decoder [+],
corks [+],
confirms [+],
component updates [+],
command execution [+],
client security [+],
claudio criscione [+],
card [+],
bridge [+],
bandwidth [+],
audio amp [+],
artsd [+],
arbitrary command [+],
appliances [+],
apache httpd [+],
airodump [+],
adapter [+],
ace [+],
Wireless [+],
Tutorials [+],
Soporte [+],
Pentesting [+],
Hardware [+],
Final [+],
4ghz [+],
BackTrack [+],
escalation [+],
service [+],
security issues [+],
os cos [+],
vmware products [+],
Tools [+],
vmware tools [+],
server [+],
safer use [+],
directory traversal vulnerability [+],
Newbie [+],
Area [+]
-
-
18:39
»
Packet Storm Security Exploits
The vulnerability described in this document could hypothetically be exploited by unprivileged code running in a VMware virtual machine (guest) in order to execute code in the host VMX process, thereby breaking out of the virtual machine; however, such exploitation has not been proven. In the event that arbitrary code execution in the VMX process is possible, kernel privileges can be obtained on a Windows host by abusing the VMX process's special access to a VMware driver, meaning the maximum possible impact of this vulnerability is elevation from unprivileged guest code execution to host kernel code execution.
-
18:39
»
Packet Storm Security Recent Files
The vulnerability described in this document could hypothetically be exploited by unprivileged code running in a VMware virtual machine (guest) in order to execute code in the host VMX process, thereby breaking out of the virtual machine; however, such exploitation has not been proven. In the event that arbitrary code execution in the VMX process is possible, kernel privileges can be obtained on a Windows host by abusing the VMX process's special access to a VMware driver, meaning the maximum possible impact of this vulnerability is elevation from unprivileged guest code execution to host kernel code execution.
-
18:39
»
Packet Storm Security Misc. Files
The vulnerability described in this document could hypothetically be exploited by unprivileged code running in a VMware virtual machine (guest) in order to execute code in the host VMX process, thereby breaking out of the virtual machine; however, such exploitation has not been proven. In the event that arbitrary code execution in the VMX process is possible, kernel privileges can be obtained on a Windows host by abusing the VMX process's special access to a VMware driver, meaning the maximum possible impact of this vulnerability is elevation from unprivileged guest code execution to host kernel code execution.
-
-
13:42
»
Packet Storm Security Advisories
VMware Security Advisory 2012-0008 - VMware ESX updates have been created for the ESX Service Console. The ESX Service Console Operating System (COS) kernel is updated which addresses several security issues in the COS kernel. The ESX Console Operating System (COS) libxml2 rpms are updated to the following versions libxml2-2.6.26-2.1.12.el5_7.2 and libxml2-python-2.6.26-2.1.12.el5_7.2 which addresses several security issues. Various other issues have also been addressed.
-
13:42
»
Packet Storm Security Recent Files
VMware Security Advisory 2012-0008 - VMware ESX updates have been created for the ESX Service Console. The ESX Service Console Operating System (COS) kernel is updated which addresses several security issues in the COS kernel. The ESX Console Operating System (COS) libxml2 rpms are updated to the following versions libxml2-2.6.26-2.1.12.el5_7.2 and libxml2-python-2.6.26-2.1.12.el5_7.2 which addresses several security issues. Various other issues have also been addressed.
-
13:42
»
Packet Storm Security Misc. Files
VMware Security Advisory 2012-0008 - VMware ESX updates have been created for the ESX Service Console. The ESX Service Console Operating System (COS) kernel is updated which addresses several security issues in the COS kernel. The ESX Console Operating System (COS) libxml2 rpms are updated to the following versions libxml2-2.6.26-2.1.12.el5_7.2 and libxml2-python-2.6.26-2.1.12.el5_7.2 which addresses several security issues. Various other issues have also been addressed.
-
-
19:08
»
Packet Storm Security Advisories
VMware Security Advisory 2012-0005 - VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, ESXi and ESX address several security issues
-
19:08
»
Packet Storm Security Recent Files
VMware Security Advisory 2012-0005 - VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, ESXi and ESX address several security issues
-
19:08
»
Packet Storm Security Misc. Files
VMware Security Advisory 2012-0005 - VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, ESXi and ESX address several security issues
-
-
12:22
»
Packet Storm Security Advisories
VMware Security Advisory 2012-0003 - Oracle (Sun) JRE is updated to version 1.5.0_32, which addresses multiple security issues that existed in earlier releases of Oracle (Sun) JRE.
-
12:22
»
Packet Storm Security Recent Files
VMware Security Advisory 2012-0003 - Oracle (Sun) JRE is updated to version 1.5.0_32, which addresses multiple security issues that existed in earlier releases of Oracle (Sun) JRE.
-
12:22
»
Packet Storm Security Misc. Files
VMware Security Advisory 2012-0003 - Oracle (Sun) JRE is updated to version 1.5.0_32, which addresses multiple security issues that existed in earlier releases of Oracle (Sun) JRE.
-
7:55
»
Packet Storm Security Recent Files
VMware Security Advisory 2012-0002 - The vCenter Chargeback Manager contains a vulnerability that allows information leakage and denial-of-service.
-
-
8:46
»
Packet Storm Security Advisories
VMware Security Advisory 2011-0014 - Configuration update for VMware vSphere Update Manager's third party Jetty Web server component addresses directory traversal vulnerability.
-
8:46
»
Packet Storm Security Recent Files
VMware Security Advisory 2011-0014 - Configuration update for VMware vSphere Update Manager's third party Jetty Web server component addresses directory traversal vulnerability.
-
8:46
»
Packet Storm Security Misc. Files
VMware Security Advisory 2011-0014 - Configuration update for VMware vSphere Update Manager's third party Jetty Web server component addresses directory traversal vulnerability.
-
7:46
»
Packet Storm Security Advisories
VMware Security Advisory 2011-0013 - Update 2 for vCenter Server 4.1, vCenter Update Manager 4.1, vSphere Hypervisor (ESXi) 4.1 and ESX 4.1 addresses several security issues.
-
7:46
»
Packet Storm Security Recent Files
VMware Security Advisory 2011-0013 - Update 2 for vCenter Server 4.1, vCenter Update Manager 4.1, vSphere Hypervisor (ESXi) 4.1 and ESX 4.1 addresses several security issues.
-
7:46
»
Packet Storm Security Misc. Files
VMware Security Advisory 2011-0013 - Update 2 for vCenter Server 4.1, vCenter Update Manager 4.1, vSphere Hypervisor (ESXi) 4.1 and ESX 4.1 addresses several security issues.
-
-
22:24
»
Packet Storm Security Advisories
VMware Security Advisory 2011-0012 - VMware ESXi and ESX updates to third party libraries and ESX Service Console address several security issues.
-
-
8:22
»
Packet Storm Security Advisories
VMware Security Advisory 2011-0011 - Hosted product updates address a remote code execution vulnerability in the way UDF file systems are handled.
-
8:22
»
Packet Storm Security Recent Files
VMware Security Advisory 2011-0011 - Hosted product updates address a remote code execution vulnerability in the way UDF file systems are handled.
-
8:22
»
Packet Storm Security Misc. Files
VMware Security Advisory 2011-0011 - Hosted product updates address a remote code execution vulnerability in the way UDF file systems are handled.
-
-
22:04
»
Packet Storm Security Advisories
VMware vFabric tc Server allows users to store the passwords used for JMX authentication in an obfuscated form for organizations where storing passwords in plain text is not permitted. The JMX authentication implementation was incorrectly allowing users to authenticate using the password in either its plain text form or its obfuscated form, bypassing the benefit of obfuscation. Versions 2.0.0.RELEASE to 2.0.5.SR01 and 2.1.0.RELEASE to 2.1.1.SR01 are affected.
-
22:04
»
Packet Storm Security Recent Files
VMware vFabric tc Server allows users to store the passwords used for JMX authentication in an obfuscated form for organizations where storing passwords in plain text is not permitted. The JMX authentication implementation was incorrectly allowing users to authenticate using the password in either its plain text form or its obfuscated form, bypassing the benefit of obfuscation. Versions 2.0.0.RELEASE to 2.0.5.SR01 and 2.1.0.RELEASE to 2.1.1.SR01 are affected.
-
22:04
»
Packet Storm Security Misc. Files
VMware vFabric tc Server allows users to store the passwords used for JMX authentication in an obfuscated form for organizations where storing passwords in plain text is not permitted. The JMX authentication implementation was incorrectly allowing users to authenticate using the password in either its plain text form or its obfuscated form, bypassing the benefit of obfuscation. Versions 2.0.0.RELEASE to 2.0.5.SR01 and 2.1.0.RELEASE to 2.1.1.SR01 are affected.
-
-
20:34
»
Packet Storm Security Advisories
VSR identified multiple vulnerabilities in VMware Tools, a suite of utilities shipped by VMware with multiple product offerings, as well as by open-source distributions as the open-vm-tools package. The first of these issues results in a minor information disclosure vulnerability, while the second two issues may result in privilege escalation in a VMware guest with VMware Tools installed.
-
20:34
»
Packet Storm Security Recent Files
VSR identified multiple vulnerabilities in VMware Tools, a suite of utilities shipped by VMware with multiple product offerings, as well as by open-source distributions as the open-vm-tools package. The first of these issues results in a minor information disclosure vulnerability, while the second two issues may result in privilege escalation in a VMware guest with VMware Tools installed.
-
20:34
»
Packet Storm Security Misc. Files
VSR identified multiple vulnerabilities in VMware Tools, a suite of utilities shipped by VMware with multiple product offerings, as well as by open-source distributions as the open-vm-tools package. The first of these issues results in a minor information disclosure vulnerability, while the second two issues may result in privilege escalation in a VMware guest with VMware Tools installed.
-
-
16:44
»
Packet Storm Security Advisories
VMware Security Advisory 2011-0008 - VMware vCenter Server directory traversal and information disclosure vulnerabilities. vSphere Client Installer is delivered through an unsigned package.
-
16:44
»
Packet Storm Security Recent Files
VMware Security Advisory 2011-0008 - VMware vCenter Server directory traversal and information disclosure vulnerabilities. vSphere Client Installer is delivered through an unsigned package.
-
-
20:08
»
Packet Storm Security Advisories
VMware Security Advisory 2011-0007 - VMware ESXi and ESX could encounter a socket exhaustion situation which may lead to a denial of service. Updates to Likewise components and to the ESX Service Console address security vulnerabilities.
-
20:08
»
Packet Storm Security Recent Files
VMware Security Advisory 2011-0007 - VMware ESXi and ESX could encounter a socket exhaustion situation which may lead to a denial of service. Updates to Likewise components and to the ESX Service Console address security vulnerabilities.
-
20:08
»
Packet Storm Security Misc. Files
VMware Security Advisory 2011-0007 - VMware ESXi and ESX could encounter a socket exhaustion situation which may lead to a denial of service. Updates to Likewise components and to the ESX Service Console address security vulnerabilities.
-
7:52
»
Packet Storm Security Advisories
VMware Security Advisory 2011-0006 - The VMware vmrun utility is susceptible to a local privilege escalation in non-standard configurations.
-
-
7:28
»
Packet Storm Security Advisories
VMware Security Advisory 2011-0004 - Service Location Protocol daemon (SLPD) denial of service issue and ESX 4.0 Service Console OS (COS) updates for bind, pam, and rpm.
-
7:28
»
Packet Storm Security Recent Files
VMware Security Advisory 2011-0004 - Service Location Protocol daemon (SLPD) denial of service issue and ESX 4.0 Service Console OS (COS) updates for bind, pam, and rpm.
-
7:28
»
Packet Storm Security Misc. Files
VMware Security Advisory 2011-0004 - Service Location Protocol daemon (SLPD) denial of service issue and ESX 4.0 Service Console OS (COS) updates for bind, pam, and rpm.
-
-
5:13
»
Packet Storm Security Advisories
VMware Security Advisory 2011-0003 - Update 1 for vCenter Server 4.1, vCenter Update Manager 4.1, vSphere Hypervisor (ESXi) 4.1, ESXi 4.1, addresses several security issues.
-
5:13
»
Packet Storm Security Recent Files
VMware Security Advisory 2011-0003 - Update 1 for vCenter Server 4.1, vCenter Update Manager 4.1, vSphere Hypervisor (ESXi) 4.1, ESXi 4.1, addresses several security issues.
-
5:13
»
Packet Storm Security Misc. Files
VMware Security Advisory 2011-0003 - Update 1 for vCenter Server 4.1, vCenter Update Manager 4.1, vSphere Hypervisor (ESXi) 4.1, ESXi 4.1, addresses several security issues.
-
-
11:42
»
Packet Storm Security Advisories
VMware Security Advisory 2011-0002 - Updated versions of the Cisco Nexus 1000V virtual switch address a denial of service in VMware ESX/ESXi.
-
11:42
»
Packet Storm Security Misc. Files
VMware Security Advisory 2011-0002 - Updated versions of the Cisco Nexus 1000V virtual switch address a denial of service in VMware ESX/ESXi.
-
-
17:17
»
Packet Storm Security Advisories
A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of multiple VMWare products. User interaction is required in that a user must visit a malicious web page or open a malicious video file.
-
17:17
»
Packet Storm Security Recent Files
A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of multiple VMWare products. User interaction is required in that a user must visit a malicious web page or open a malicious video file.
-
17:17
»
Packet Storm Security Misc. Files
A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of multiple VMWare products. User interaction is required in that a user must visit a malicious web page or open a malicious video file.
-
-
18:26
»
Packet Storm Security Advisories
VMware Security Advisory 2010-0017 - ESX Service Console OS (COS) kernel update. This patch updates the Service Console kernel to fix a stack pointer underflow issue in the 32-bit compatibility layer. Exploitation of this issue could allow a local user to gain additional privileges.
-
18:26
»
Packet Storm Security Recent Files
VMware Security Advisory 2010-0017 - ESX Service Console OS (COS) kernel update. This patch updates the Service Console kernel to fix a stack pointer underflow issue in the 32-bit compatibility layer. Exploitation of this issue could allow a local user to gain additional privileges.
-
18:26
»
Packet Storm Security Misc. Files
VMware Security Advisory 2010-0017 - ESX Service Console OS (COS) kernel update. This patch updates the Service Console kernel to fix a stack pointer underflow issue in the 32-bit compatibility layer. Exploitation of this issue could allow a local user to gain additional privileges.
-
-
10:01
»
Packet Storm Security Advisories
VMware Security Advisory 2010-0016 - This patch updates the service console kernel to fix multiple security issues. Updates to the likewisekrb5, likewiseopenldap, likewiseopen, and pamkrb5 packages address several security issues.
-
10:01
»
Packet Storm Security Recent Files
VMware Security Advisory 2010-0016 - This patch updates the service console kernel to fix multiple security issues. Updates to the likewisekrb5, likewiseopenldap, likewiseopen, and pamkrb5 packages address several security issues.
-
10:01
»
Packet Storm Security Misc. Files
VMware Security Advisory 2010-0016 - This patch updates the service console kernel to fix multiple security issues. Updates to the likewisekrb5, likewiseopenldap, likewiseopen, and pamkrb5 packages address several security issues.
-
14:00
»
Packet Storm Security Advisories
VMware Security Advisory - VMware Workstation and Player address a potential installer security issue and security issues in libpng. VMware ACE Management Server (AMS) for Windows updates Apache httpd.
-
-
12:02
»
remote-exploit & backtrack
Ok. Here is the story..
Installed BackTrack using VMware, by downloading the .ISO not the VMware Image. Got confused by downloading the VMware imagine first..
In any case, installed it, booted up, 'ifconfig -a' but nothing is there except "eth0" and "local loopback", altough I have two wireless adapters. One being Realtek RTL8187 another being DW1501 Wireless card..
Sorry for being a noob, but how do you turn them on?
-
-
12:12
»
SecuriTeam
A "binary planting" vulnerability in VMware Tools for Windows allows a local non-administrative attacker, under certain circumstances, to execute a malicious executable on virtual Windows machines in the context of logged- on users.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
12:07
»
SecuriTeam
A "binary planting" vulnerability in VMware Tools for Windows allows local or remote (possibly Internet-based) attackers to deploy and execute malicious code on virtual Windows machines in the context of logged-on users.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
17:03
»
SecuriTeam
A vulnerability was discovered in multiple VMWare products, which can be exploited by malicious people to compromise a vulnerable system.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
16:55
»
SecuriTeam
A Heap Overflow vulnerability was discovered in VMware products.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
16:45
»
SecuriTeam
Two vulnerabilities were discovered in multiple VMWare products, which can be exploited by malicious people to compromise a vulnerable system.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
12:18
»
SecuriTeam
Multiple vulnerabilities were discovered in VMWare WebAccess.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
21:02
»
SecuriTeam
Multiple buffer over-read vulnerabilities were discovered in VMWare vMA and ESX Service Console's Expat.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
20:59
»
SecuriTeam
Multiple buffer over-read vulnerabilities were discovered in VMWare vMA and ESX Service Console's Expat.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
20:57
»
SecuriTeam
A flaw was discovered in the way ntpd handled certain malformed NTP packets.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
23:01
»
Packet Storm Security Tools
ScoopyNG combines the detection tricks of Scoopy Doo and Jerry as well as some new techniques to determine if a current OS is running inside a VMware Virtual Machine (VM) or on a native system. ScoopyNG should work on all modern uni-, multi- and multi-core cpu's. ScoopyNG is able to detect VMware even if anti-detection-mechanisms are deployed.
-
23:00
»
Packet Storm Security Recent Files
ScoopyNG combines the detection tricks of Scoopy Doo and Jerry as well as some new techniques to determine if a current OS is running inside a VMware Virtual Machine (VM) or on a native system. ScoopyNG should work on all modern uni-, multi- and multi-core cpu's. ScoopyNG is able to detect VMware even if anti-detection-mechanisms are deployed.
-
-
20:56
»
SecuriTeam
Multiple Integer Overflow vulnerabilities were discovered in VMWare vMA and ESX Service Console's GLib library.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
14:00
»
remote-exploit & backtrack
Hi,
Opened the Backtrack 4 Final Imagem in VMWare Fusion (mac) and everything seems ok but the resolution.
The maximum it allows is 1024x768 witch is not the native screen resolution.
Already tried to reinstall the vmware-tools but no differences.
Thank you in advance
-
-
5:17
»
remote-exploit & backtrack
Hey
I habe installed BT4 Final on my VMware Workstation but i can´t connect to the internet and i can´t install the Vmware Tools? What can i do?
I also have Ubuntu on it and everthing works with it.
PC0017
-
14:08
»
remote-exploit & backtrack
He all,
I have a problem, I run Backtrack 4 final in Vmware, on my laptop for crack wep and wpa it's great, but when I launche wireshark. It seems that it only capture reqeust from PC's like DHCP request etc. when filter out the POP I can't see a thing thoug I send and receive mails on my other pc(windows 7) now I run wireshark on windows 7 and send and receive it does see it.
So why is wireshark only looking in my laptop and not the other PC's. btw I use briged network in vmware
-
-
20:00
»
Packet Storm Security Advisories
VMware Security Advisory - A cross-site scripting vulnerability in WebAccess allows for disclosure of sensitive information. The flaw is due to insufficient verification of certain parameters which may lead to redirection of a user's requests. This vulnerability can only be exploited if the attacker tricks the WebAccess user into clicking a malicious link and the attacker has control of a server on the same network as the system where WebAccess is being used.
-
-
4:00
»
remote-exploit & backtrack
hi!
i've using backtrack 4 on VMware. When I use the self-installed wlassistant i can see the wifi networks on my neighbourhoods, but if I've using in the kernel the airodump, than i can NOT see any usefull networks detalis, i see nothing.
Please help me, what may be the problem. Thanks guys.
-
-
16:17
»
remote-exploit & backtrack
i have install bt4 in vmware (in my desktop pc).
i login with no problem.
when i type iwconfig say no "lo no wireless connections"
"eth0 no wireless connections". what i must now? i have connect usb wifi TPLINK 821N.
thanks
-
-
0:59
»
remote-exploit & backtrack
Hello.
Probably it makes more sense for most users to have the BT4 VMWare Image
(bt4-final-vm.zip) run under VMWare with Windows as HostOS...
Are there any known problems if the HostOS is Linux/Debian?
Thank's a lot for any feedback!
John
-
-
3:25
»
remote-exploit & backtrack
:mad:
Hi Guys ,
I have Windows Vista as my base operating system , then I loaded VMware and then downloaded the BT4 Final release.
My Lan card is a Intel(R) 82567LM Gigabit Network Connection. Then VMware has created 2 VMware Network Adapters.
I have tried the following to get the LAN working in BT4
1.I have tried setting the card to NAT , using the VMWARE program settings
2. Also tried using the custom settings choosing the vmware adapters.
3.tried using the ifconfig commands to assign an ipadress to the card manually.
Surely this shouldnt be that complicated ? What am I doing wrong here, can someone assist me please.
Thank you
-
-
4:35
»
remote-exploit & backtrack
Virtualisierung ist derzeit eines der ganz großen Themen in der IT. Neben Einsparungen in Hardware lässt sich häufig die Administration erheblich vereinfachen und die Ausfallsicherheit erhöhen. Mit Themen dieser Tragweite befassen sich natürlich nicht nur Administratoren und Management sondern auch IT-Sicherheitsforscher und eben auch die bösen Jungs.
Was wäre also wenn eine Virtualisierungslösung, wie beispielsweise der VMWare Server, eine Sicherheitslücke beinhalten würde die es ermöglicht Files auf dem Hostsystem zu lesen?
Man könnte beispielsweise die Datei /etc/passwd auslesen und sich eine Übersicht der vorhandenen User machen. Würde der Service mit der Schwachstelle als root User laufen, könnte man beispielsweise auch noch die /etc/shadow auslesen und die Passwörter analysieren bzw. einem Bruteforce Angriff unterziehen. Andererseits könnte man aber auch einfach die vorhandenen virtualisierten Systeme herunterladen und diese offline auf Schwachstellen, Daten, Passwörter usw analysieren. Mit den gesammelten Daten kommt man später zurück und greift die gefunden Schwachstellen dediziert an ...
... hört sich nicht gut an oder? ;)
Auf der diesjährigen Shmoocon präsentierten Justin Morehouse und Tony Flick eine Directory Traversal Schwachstelle im VMWare und ESX Server die genau solche Angriffe ermöglicht.
Folgende Bilderstrecke zeigt einige der Details eines erfolgreichen Angriffs:
betroffene VMWare Server- VMware Server 2.x < 2.0.2 build 203138 (Linux)
- VMware Server 1.x < 1.0.10 build 203137 (Linux)
betroffene ESX/ESXi Server- ESX 3.5 w/o ESX350-200901401-SG
- ESX 3.0.3 w/o ESX303-200812406-BG
- ESXi 3.5 w/o ESXe350-200901401-I-SG
Zeitraum:
- Vulnerability identified on 5/14/09
- Reported to VMware on 5/15/09
- VMware responded on 5/21/09
- CVE-2009-3733 reserved on 10/20/09
- VMSA-2009-0015 released on 10/27/09
Bereits nach 5 Monate wurde ein Sicherheitsupdate veröffentlicht ... diese überaus schnelle Bearbeitung eines solchen Problems empfinde ich als sehr beruhigend :-D
Source:
Weitere Infos wie üblich auf meiner Site ...
stealing the network | www.s3cur1ty.de
-
-
6:33
»
Carnal0wnage
Since everyone else is releasing code to check for/exploit the vmware server/esx/esxi directory traversal vulnerability I pushed up my checker module to the metasploit trunk as an auxiliary scanner module.
If you want to just download a full guest host check out:
GuestStealer --
http://www.fyrmassociates.com/tools/gueststealer-v1.1.plor the
nmap script --
http://www.skullsecurity.org/blog/?p=436I don't feel like re-implementing it and I for sure don't want anything ever auto-downloading several gigabytes of information for me, so if you want that functionality write it or use the above tools. Gueststealer works great.
Vulnerability References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3733
http://www.vmware.com/security/advisories/VMSA-2009-0015.html
The module:
The module is simple enough. By default it checks for:
FILE /etc/vmware/hostd/vmInventory.xml
If it receives a 200 to the traversal string and file it says its vulnerable. If you want to see the output of the file you can uncomment the following line from the code:
#print_status("Output Of Requested File:\n#{res.body}")
reload the module, then change the file to what you want (example: set FILE /etc/shadow).
Since VMWare runs as root you pretty much have access to anything on the file system.
-
-
3:38
»
remote-exploit & backtrack
Hello, i run backtrack image on VMWARE and i need open new Konsole window - how can i do it? There is no Shell console window button in systray.
Here is my screen capture
screencast.com/t/MjZjYzU0M
Thank you.
-
-
10:20
»
remote-exploit & backtrack
I have a laptop that supports 1600x900 but i cann't for the life of me get this within BT4 in vmware. I can get other large sizes.
Im using the latest BT4 vmware image.
I have tried the usual editing xorg.conf and xrandr etc.
Can the vmware tools support my resolution?
I have Ubuntu 10.x in vmware supporting 1600x900 and it looks beautiful!
Any suggestions on what to try next?
D
-
-
18:45
»
remote-exploit & backtrack
En el caso de PCs algo lentos como netbooks se hace muy dificil identificar y solucionar este error, puesto que al lanzar "startx", el demonio "artsd" (de la tarjeta de sonido) come todos los recursos del sistema.
Link de referencia:
3w.backtrack-linux.org/forums/backtrack-fixes/23-artsd-eating-up-cpu-vmare-image.html (3w=tres uves dobles)
Soluciones:
- Actualizar a la ultima version de vmware. (no creo que sea necesario, pero noté cierta mejoría con la v.7).
Te saldrá antes la ventana de error del proceso "artsd".
- Cuando arranques BT4-vmware, espera a que te salga una ventana de error advirtiendo del mal funcionamiento del proceso "artsd". (suele tardar en salir dependiendo de lo rapido que se tu PC)
Termina ahí con dicho proceso, quedará solucionado el error para futuros arranques. Creo que es la mejor opción.
- Con el comando "top" identificar el proceso, anotar el PID y matarlo con "kill -9 PID"
- En el menú KDE seleccionar "Preferencias/Audio & Multimedia/Ajustes de sonido" y modificarlo, seleccionando en harware "Advanced Linux Sound Architecture"..
- Comando "update-rc.d-f foobar delete" (foobar=marcador de posición).
- En el menú KDE seleccionar "Sistema/Ajustes/Sonido y multimedia/sistema de sonido" en "enable sound system" desmarcar "Habilitar el sistema de sonido"
- En configuracion de sonido del vmware activar la opción "Specify host sound card" y elige tu tarjeta.
- En caso extremo puedes desactivar la tarjeta de sonido en configuración vmware antes de arrancar.
Es un caso poco frecuente, de los que te puedes comer la cabeza durante mucho tiempo, sobre todo si se trata de un PC lento (netbooks..).
Espero que sea útil.
by donshine.
-
-
18:00
»
Packet Storm Security Advisories
VMware Security Advisory - JRE update to version 1.5.0_22, which addresses multiple security issues that existed in earlier releases of JRE.
-
-
6:58
»
remote-exploit & backtrack
Hello,
I've installed BT4 on a VMware Workstation.
But for some weird reason it can't see any of my network drives, I have both Ethernet and WiFi.
I tried to play with the VMware network setting for this machine, NAT and Bridge, nothing.
Also, I installed the machine as Ubuntu, I figured since both Ubuntu and BT4 are based on Debian it should be ok.
I tried to look through the forum but was unable to find anything related threads that can fix my problem.
Any advice?
Thank you.
-
-
12:49
»
remote-exploit & backtrack
I have VMware Workstation7.bundle how can setup on live cd
used method for modify live cd secript bt4-customise.sh
how can tell command to setup to path folder "edit" , without setup on system just setup on folder "edit"
-
-
14:24
»
remote-exploit & backtrack
As the title stated, I am trying to find some facts about
WHICH USB Wifi N-Draft that is known to work with Backtrack installed on VMWare Fusion.
The USB N-Draft that I am looking are the ones that supports
BOTH 2.4Ghz and 5Ghz.
If someone has used a particular USB N-Draft Wifi for the above, could you share the brand, model and where you buy it?
Thanks!
-
-
1:28
»
remote-exploit & backtrack
Hi, I've been used backTrack 4.0 final as a live cd in my virtual machine (vmware), when it's getting start up when I want to starta program or even move the mouse from one location to another it's very slow, I've been installed it on my Laptop as primary OS (hard-drive install) and I have no problem, but it's strictly important for me to run it on the vmware ( as a vm ) .
could anyone point me to some idea for solving this problem !?
thnx .
-
-
12:58
»
remote-exploit & backtrack
hello, i am here newbie, please help me. how to make the operation of the Internet with VMware BT4?
my internet connected with dhcp.. but i dont know how configuriation vmware and bt4...
sorry my bad english..
-
-
8:47
»
remote-exploit & backtrack
Hi
I just installed backtrack 4 final in VMware, i used backtrack 2,3 and pre final 4 and i have never had this problem ... after installing and configure networking ( in VMware the connection is Bridge ) and in backtrack the eth0 interface is geting ip address from the dhcp. The local ping from the shell is ok ... i can ping and the ping has reply ... but if i ping Google im getting no reply. But if i try to open oogle.com with firefox the page opens ... does anyone knows any solution for this ?
TNX in advance !
-
4:44
»
remote-exploit & backtrack
Ettercap just returns a message that it cant use a empty list of hosts.. But Im able to map my whole network. I am doing something wrong?
-
-
18:01
»
remote-exploit & backtrack
Hello,
I was wondering if you could possibly help me, ive been reading for hours each day about deiver,chipsets,wireless lan cards etc ive done a search on the forum but to no avail, here goes..
I have an
INPROCONN IPN2220 wireless lan card.
And a
Realtek rtl8139/810 family fast ethernet NIC.
and pcmia adapter is
Texas instruments PCI-1410 cardbus controller.
Inside a toshiba L10 pro satellite.
Ive downloaded vmware workstation 7, backtrack 4 vmware image and aircrack. what i want to know is does my wireless lan support packet injection and monitor mode in windows? If not, does vmware support my wireless lan so i can inject packets in linux?
Thanks in advance!:):)
1337day (was: Inj3ct0r, 1337db)
OSVDB Vulnerabilities
Exploit-DB
SecurityFocus Vulnerabilities
Bugtraq
XSSed
Sophos security news
Penetration Testing
BackTrack Linux Forums
Threatpost
SecDocs
carnal0wnage.attackresearch.com
Darknet
The Exploitant
Hack a Day
Wirevolution