Comments on virtuallyGhetto: ESXi 4.1 - Major Security Issue

William, I read this article a year ago and applie...

2011-09-30T10:20:40.578-07:00

William, I read this article a year ago and applied the patch and thought that was the end of it. Fast forward to ESXi5 and it reapper on my network, here's what I mean http://toti3.wordpress.com/2011/09/30/esxi-password-vulnerability-reborn/

Hi Didier, I just got back from the weekend and n...

2010-07-18T15:45:44.720-07:00

Hi Didier,

I just got back from the weekend and noticed the post! Great job, I did not have a lot of time to spend trying to find the solution, but it looks like it was a pretty straight forward one.

I also updated my blog post with the link to yours for the solution. One method of ensuring the file is preserved is just edit the auto-backup script to also backup this specific file. I would still recommend waiting for VMware to provide a true fix via a patch/update.

--William

Hi William, I did also some researches on this iss...

2010-07-17T19:46:05.371-07:00

Hi William, I did also some researches on this issue and came with back with a workaround... Read more at http://deinoscloud.wordpress.com/2010/07/18/esxi-4-1-major-security-issue-the-sequel-and-the-workaround/

Cheers,
Didier

I can vouch for this issue too - it was my colleag...

2010-07-17T14:39:32.662-07:00

I can vouch for this issue too - it was my colleague who posted that to the VMware community ;-)

He got me to test it, and the problem exists for sure.

Scott Vessey

The problem does not append with AD auth

2010-07-17T14:20:40.755-07:00

The problem does not append with AD auth

What if you use the AD integration, is that affect...

2010-07-17T13:19:08.686-07:00

What if you use the AD integration, is that affected?

Mike, Good find, I did not notice this earlier wh...

2010-07-17T11:30:21.190-07:00

Mike,

Good find, I did not notice this earlier while looking in the shadow file. This would make sense as DES crypt is limited to 8 character password + salt. I suspect the password is just being truncated or being encrypted by DES vs MD5 as you mentioned.

Thanks

--William

I was looking at a change I made on a newly upgrad...

2010-07-17T11:19:28.080-07:00

I was looking at a change I made on a newly upgraded 4.1 system...

And it looks like things have reverted to DES for the /etc/shadow files from a previous setting of MD5 hashes.

Not good...