VMware ACE Management Server Two Vulnerabilities

Last Update Date: 28 Jan 2011 Release Date: 27 Sep 2010 5422 Views

RISK: Medium Risk

Two vulnerabilities have been identified in VMware ACE Management Server (AMS), which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system.

Impact

Remote Code Execution

System / Technologies affected

VMware ACE Management Server versions 2.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.
Upgrade to VMware ACE Management Server version 2.7.2 build 301548 (Windows) :
http://downloads.vmware.com/d/info/desktop_downloads/vmware_ace/2_7
A final resolution is pending completion for VMware ACE Management Server running on Linux.

Vulnerability Identifier

CVE-2010-0425
CVE-2010-0434

Source

Secunia
VUPEN