Shanon Olsson

**Name of the Vulnerable Software and Affected Versions** VMware vCenter Server Appliance (affected versions not specified) **Description** The issue allows remote authenticated users to execute arbitrary commands as root by escaping from a chroot jail. This is related to the Ruby vSphere Console (RVC) in VMware vCenter Server Appliance. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** VMware ESXi versions 4.0 through 5.0 VMware ESX versions 4.0 and 4.1 **Description** A buffer overflow issue allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors. **Recommendations** For VMware ESXi versions 4.0 through 5.0, update to a version that contains a fix for this issue. For VMware ESX versions 4.0 and 4.1, update to a version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** VMware ESXi versions 4.0 through 5.0 VMware ESX versions 4.0 through 4.1 **Description** A directory traversal issue allows remote attackers to delete arbitrary host OS files via unspecified vectors. **Recommendations** For VMware ESXi versions 4.0 through 5.0, update to a version that is not affected by this issue. For VMware ESX versions 4.0 through 4.1, update to a version that is not affected by this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.