Security: VMware VirtualCenter Client SSL Verification Security Issue

Vendors & Products >
- Radar
  The Virtualization Industry Radar is the virtualization.info database tracking over 80 virtualization vendors and more than 100 products.
- Roadmap
  The Virtualization Industry Roadmap tracks the past and upcoming releases for all the virtualization products listed on the Radar.
- Buyer's Guide
  The virtualization.info Buyer's Guide compares the feature-set of several products in the same market segment.
- Reviews
  The virtualization.info Review Center publishes extensive and unbiased analysis of enterprise virtualization products.
Market Trends >
- Challenges
  The Virtualization Industry Challenges report tracks the top 10 issues when embracing virtualization.
- Predictions
  The Virtualization Industry Predictions tracks all the forecasts of the leading analysis firms about the virtualization market for the next 5-10 years.
Resources >
- Webcasts
  The virtualization.info video library collects webcasts from the industry vendors about several virtualization topics.
- Interviews
  Unplugged discussions with virtualization leaders.
Services >
- Rent-A-Lab
  Rent-A-Lab is an on-demand data center that virtualization professionals can rent and access remotely.
- Job Board
  The virtualization.info's Job Board is the place to go when looking for a new cool job in the virtualization industry.
- Bookstore
  The virtualization.info's Bookstore allows to browse and buy any English book about virtualization technologies. Powered by Amazon.
Get Together >
- Vanguards Community
  The virtualization.info Vanguards network connects over 2000 vitualization professionals across the globe.
- Virtualization Congress
  The Virtualization Congress is the virtualization.info's independent conference about application, OS and hardware virtualization.

日本語

Security: VMware VirtualCenter Client SSL Verification Security Issue

Posted by Alessandro Perilli | Friday, November 24, 2006 | 0 Comments

VMware released a new security advice about VirtualCenter:

The security issue is caused due to the x.509 certificate presented by a server at the beginning of an SSL session is not verified. This can be exploited to spoof valid servers via a man-in-the-middle attack. The security issue is reported in the following versions:
VMware VirtualCenter client 2.x before 2.0.1 Patch 1 (Build 33643)

VMware VirtualCenter client 1.4.x before 1.4.1 Patch 1 (Build 33425)

Download the VirtualCenter 2.0.1 Patch 1 here and VirtualCenter 1.4.1 Patch 1 here.