VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 before Update 3a, VMware VI-Client 2.5, VMware ESXi 3.5 through 4.1, and VMware ESX 3.5 through 4.1 do not properly implement the management authentication protocol, which allow remote servers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several components and third-party libraries :

  - Authentication Service
  - bind
  - libxml2
  - libxslt

a. VMware vSphere client-side authentication memory corruption    vulnerability

   VMware vCenter Server, vSphere Client, and ESX contain a    vulnerability in the handling of the management authentication    protocol. To exploit this vulnerability, an attacker must    convince either vCenter Server, vSphere Client or ESX to    interact with a malicious server as a client. Exploitation of    the issue may lead to code execution on the client system.
        To reduce the likelihood of exploitation, vSphere components    should be deployed on an isolated management network.
        The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the name CVE-2013-1405 to this issue.

b. Update to ESX/ESXi libxml2 userworld and service console

   The ESX/ESXi userworld libxml2 library has been updated to    resolve multiple security issues. Also, the ESX service console    libxml2 packages are updated to the following versions :

     libxml2-2.6.26-2.1.15.el5_8.5      libxml2-python-2.6.26-2.1.15.el5_8.5

   These updates fix multiple security issues. The Common    Vulnerabilities and Exposures project (cve.mitre.org) has    assigned the names CVE-2011-3102 and CVE-2012-2807 to these    issues.

c. Update to ESX service console bind packages

   The ESX service console bind packages are updated to the    following versions :

     bind-libs-9.3.6-20.P1.el5_8.2      bind-utils-9.3.6-20.P1.el5_8.2

   These updates fix a security issue. The Common Vulnerabilities    and Exposures project (cve.mitre.org) has assigned the name    CVE-2012-4244 to this issue.

d. Update to ESX service console libxslt package

   The ESX service console libxslt package is updated to version    libxslt-1.1.17-4.el5_8.3 to resolve multiple security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2011-1202, CVE-2011-3970,    CVE-2012-2825, CVE-2012-2870, and CVE-2012-2871 to these issues.

The version of vSphere Client installed on the remote Windows host is potentially affected by a memory corruption issue in the authentication mechanism.

ID	Name	Product	Family	Type	Severity
89661	VMware ESX / ESXi Authentication Service and Third-Party Libraries Multiple Vulnerabilities (VMSA-2013-0001) (remote check)	Nessus	Misc.	Remote	critical
64642	VMSA-2013-0001 : VMware vSphere security updates for the authentication service and third-party libraries	Nessus	VMware ESX Local Security Checks	Local	critical
64559	VMware vSphere Client Memory Corruption (VMSA-2013-0001)	Nessus	Windows	Local	critical

Detections

Analytics

CVE-2013-1405

critical

Tenable Plugins

critical

critical

critical