Description
VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might allow local attackers to gain privileges.
References
- 20060602 VMSA-2006-0002 - VMware Server sensitive information lifetime issue mailing-list
- ADV-2006-2104 vdb-entry
- vmware-server-information-disclosure(26879) vdb-entry
- http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2124
- 18236 vdb-entry
- 1016200 vdb-entry