VMware Gsx Server vulnerabilities

6 CVEs affecting VMware Gsx Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-4459, published 2005-12-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-4459, published 2005-12-21. High severity, CVSS 10.0. EPSS: 14.2% chance of exploitation in the next 30 days. Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers,…
CVE-2002-0814, published 2002-08-12. High severity, CVSS 7.5. EPSS: 13.7% chance of exploitation in the next 30 days. Buffer overflow in VMware Authorization Service for VMware GSX Server 2.0.0 build-2050 allows remote authenticated users to execute arbitrary code via a long GLOBAL argument.
CVE-2004-0112, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 10.4% chance of exploitation in the next 30 days. The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote…
CVE-2004-0079, published 2004-11-23. High severity, CVSS 7.5. EPSS: 9.5% chance of exploitation in the next 30 days. The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null…
CVE-2004-0081, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 7.2% chance of exploitation in the next 30 days. OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test…
CVE-2003-0631, published 2003-08-27. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. VMware GSX Server 2.5.1 build 4968 and earlier, and Workstation 4.0 and earlier, allows local users to gain root privileges via certain enivronment variables that are used when launching a virtual…