Download VMware Server 1.0.5 build 80187

Vmware has released a new version of Vmware Server. The program has arrived at version number 1.0.5 build 80187 and can be used from this page for Windows and Linux can be downloaded. Vmware Server is a virtualization program for servers that allows multiple and different operating systems to run in a virtual environment. More information about this program can be found at the website to be found. The developers have made the following changes in Vmware Server 1.05:

Security Issues Resolved in VMware Server 1.0.5

• A security vulnerability in OpenSSL 0.9.7j could make it possible to forge an RSA key signature. VMware Server 1.0.5 upgrades OpenSSL to version 0.9.7l to avoid this vulnerability. bug 216497), RSA Signature Forgery (CVE-2006-4339)
• An internal security audit determined that a malicious user could attain and exploit LocalSystem privileges by causing the authd process to connect to a named pipe that is opened and controlled by the malicious user. In this situation, the malicious user could successfully impersonate authd and attain privileges under which authd is executing. bug 235420, (Foundstone CODE-BUG-H-001)
• An internal security audit determined that a malicious user could exploit an insecurely created named pipe object to escalate privileges or create a denial-of-service attack. bug 235833, (Foundstone CODE-BUG-H-002)
• This release updates the libpng library to version 1.2.22 to remove various security vulnerabilities. bug 237049
• A vulnerability in VMware Workstation running on Windows allowed complete access to the host’s file system from a guest machine. This access included the ability to create and modify executable files in sensitive locations. bug 240000, (CORE-2007-0930)
• The authd process read and honored the vmx.fullpath variable in the user-writable file config.ini, creating a security vulnerability. bug 241648
• The config.ini file could be modified by non-administrator to change the VMX launch path. This created a vulnerability that could be exploited to escalate a user’s privileges. bug 241677

In addition, Version 1.0.5 improves Remote Console performance and screen refreshing.[break]