Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2016.2351
VMware Horizon View updates address directory traversal vulnerability
7 October 2016
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: VMware Horizon View
Publisher: VMWare
Operating System: Windows
VMware ESX Server
Impact/Access: Access Confidential Data -- Remote/Unauthenticated
Resolution: Patch/Upgrade
CVE Names: CVE-2016-7087
- --------------------------BEGIN INCLUDED TEXT--------------------
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- - ------------------------------------------------------------------------------
VMware Security Advisory
Advisory ID: VMSA-2016-0015
Severity: Important
Synopsis: VMware Horizon View updates address directory traversal
vulnerability
Issue date: 2016-10-06
Updated on: 2016-10-06 (Initial Advisory)
CVE number: CVE-2016-7087
1. Summary
VMware Horizon View updates address directory traversal vulnerability.
2. Relevant Products
VMware Horizon View
3. Problem Description
VMware Horizon View updates address directory traversal vulnerability
VMware Horizon View contains a vulnerability that may allow for a directory
traversal on the Horizon View Connection Server. Exploitation of this issue
may lead to a partial information disclosure.
VMware would like to thank Mike Arnold (Bruk0ut) working with Trend Micro's
Zero Day Initiative for reporting this issue to us.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the identifier CVE-2016-7087 to this issue.
Column 5 of the following table lists the action required to remediate the
vulnerability in each release, if a solution is available.
VMware Product Running Replace with/
Product Version on Severity Apply Patch Workaround
=================== ======= ======= ========= ============= ==========
VMware Horizon View 7.x Windows Important 7.0.1 None
VMware Horizon View 6.x Windows Important 6.2.3 None
VMware Horizon View 5.x Windows Important 5.3.7 None
4. Solution
Please review the patch/release notes for your product and version and
verify the checksum of your downloaded file.
VMware Horizon View 7.0.1
Downloads and Documentation:
https://my.vmware.com/en/web/vmware/info/slug/desktop_end_user_computing/vmware_horizon/7_0
VMware Horizon View 6.2.3
Downloads and Documentation:
https://my.vmware.com/web/vmware/info/slug/desktop_end_user_computing/vmware_horizon/6_2
VMware Horizon View 5.3.7
Downloads and Documentation:
https://my.vmware.com/web/vmware/info/slug/desktop_end_user_computing/vmware_horizon_with_view/5_3
5. References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7087
- - ------------------------------------------------------------------------
6. Change log
2016-10-06 VMSA-2016-0015 Initial security advisory in conjunction with the
release of VMware Horizon View 5.3.7 on 2016-10-06.
- - ------------------------------------------------------------------------
7. Contact
E-mail list for product security notifications and announcements:
http://lists.vmware.com/cgi-bin/mailman/listinfo/security-announce
This Security Advisory is posted to the following lists:
security-announce at lists.vmware.com
bugtraq at securityfocus.com
fulldisclosure at seclists.org
E-mail: security at vmware.com
PGP key at: https://kb.vmware.com/kb/1055
VMware Security Advisories
http://www.vmware.com/security/advisories
VMware Security Response Policy
https://www.vmware.com/support/policies/security_response.html
VMware Lifecycle Support Phases
https://www.vmware.com/support/policies/lifecycle.html
Twitter
https://twitter.com/VMwareSRC
Copyright 2016 VMware Inc. All rights reserved.
- -----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
iEYEARECAAYFAlf2r08ACgkQDEcm8Vbi9kOESACg4jzeuOyzRC9d003QAQvWcqsx
XZ4Amwb1CE+JmZUM/LSl2uBxZQdxEauK
=G7kh
- -----END PGP SIGNATURE-----
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
http://www.auscert.org.au/render.html?cid=1980
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=mjty
-----END PGP SIGNATURE-----