SoylentNews

EMC, VMware Security Bugs Throw Gasoline on Cloud Security Fire

posted by martyb on Friday January 12 2018, @02:44AM   
from the update-early-and-often dept.

Fnord666 writes:

While everyone was screaming about Meltdown and Spectre, another urgent security fix was already in progress for many corporate data centers and cloud providers who use products from Dell's EMC and VMware units. A trio of critical, newly reported vulnerabilities in EMC and VMware backup and recovery tools—EMC Avamar, EMC NetWorker, EMC Integrated Data Protection Appliance, and vSphere Data Protection—could allow an attacker to gain root access to the systems or to specific files, or inject malicious files into the server's file system. These problems can only be fixed with upgrades. While the EMC vulnerabilities were announced late last year, VMware only became aware of its vulnerability last week.

[...] For those familiar with the architecture of these products, the vulnerabilities may not be a surprise—EMC Avamar and the other applications use Apache Tomcat, which was patched multiple times last year to address critical security vulnerabilities. However, it's not clear whether these patches were incorporated into earlier updates of the EMC and VMware products or if any of the bugs just fixed in updates of the EMC/VMware products were Tomcat related.

Source: https://arstechnica.com/information-technology/2018/01/emc-vmware-security-bugs-throw-gasoline-on-cloud-security-fire/

---

Original Submission

• gasoline, really? gasoline, really? (Score: 2, Insightful) by Anonymous Coward on Friday January 12 2018, @03:28AM (3 children)

  by Anonymous Coward on Friday January 12 2018, @03:28AM (#621240)

  Ars may like sensational headlines, but I could do without metaphors about gasoline on fires. Aren't we old enough here to recognize that something is important from a straight forward description?

  aside -- if you have never tried throwing gasoline on a fire, I suggest you watch idiots do it on YouTube instead. It can easily flash back and light the can that you are using to throw from. Since it's explosive over a fairly wide range of concentrations in air, it can even explode in the container after a rapid flash back. https://en.wikipedia.org/wiki/Flammability_limit#Examples [wikipedia.org]

  Starting Score:	0		points
  Moderation		+2
  Insightful=1, Informative=1, Total=2
  Extra 'Insightful' Modifier		0
  Total Score:		2

• Re:gasoline, really? Re:gasoline, really? (Score: 2) by c0lo on Friday January 12 2018, @09:16AM (1 child)

  by c0lo (156) on Friday January 12 2018, @09:16AM (#621317) Journal

  Well, freeze it first.
  I'm sure you'll find plenty of YouTube videos about listing gasoline frozen in liquid nitrogen.

  --
  https://www.youtube.com/watch?v=aoFiw2jMy-0 https://soylentnews.org/~MichaelDavidCrawford

  Parent

  • Re:gasoline, really? (Score: 1, Informative) by Anonymous Coward on Friday January 12 2018, @01:21PM

    by Anonymous Coward on Friday January 12 2018, @01:21PM (#621354)

    18,400 video hits...

    This one is kind of cool, drops of liquid N₂ self-propel on the surface of gasoline,
    https://www.youtube.com/watch?v=UTbZDWa94ow [youtube.com]

    And drops of gasoline also move (but slower) on the surface of LN₂. This guy goes further and lights off the frozen gasoline...with his open gasoline container less than a meter away,
    https://www.youtube.com/watch?v=TNjOaAIz_ZY [youtube.com]

    Parent

• Re:gasoline, really? (Score: 0) by Anonymous Coward on Friday January 12 2018, @01:14PM

  by Anonymous Coward on Friday January 12 2018, @01:14PM (#621352)

  https://en.wikipedia.org/wiki/Metaphor [wikipedia.org]

  Parent