OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
[ISN] Virtualisation users should expect more attacks

From: InfoSec News (alertsinfosecnews.org)
Date: Tue Sep 09 2008 - 03:20:06 CDT


http://www.techworld.com/security/news/index.cfm?newsID=104088

By Tom Jowitt
Techworld
08 September 2008

VMware's recent release of a large number of patches for its
virtualisation offerings is likely to be the first of many, as hackers
increasingly focus their attention on virtualised environments.

That is according to security vendor, Fortify Software, which is urging
caution among those companies looking to adopt virtualisation
technology.

Last week, the virtualisation market leader VMware warned of at least 16
vulnerabilities concerning VMware ACE, VMware Server, VMware ESX, VMware
Workstation and VMware Player. The advisory also included links to a
number of patches.

The US Computer Emergency Readiness Team (US-CERT) meanwhile said these
vulnerabilities could allow hackers to execute arbitrary code, cause a
denial-of-service condition, access the system with elevated privileges,
or obtain sensitive information.

[...]

__________________________________________________
Register now for HITBSecConf2008 - Malaysia! With
a new triple-track conference featuring 4 keynote
speakers and over 35 international experts, this
is the largest network security event in Asia and
the Middle East!
http://conference.hackinthebox.org/hitbsecconf2008kl/