Hardware and services giant Hewlett-Packard, chip-maker Intel and web portal Yahoo! are to build “a globally distributed, Internet-scale testing environment”. This will comprise six giant data centres, located around the world and based mainly on HP and Intel kit, each containing between 1,000 and 4,000 processor cores.
This platform will be used as a test bed for experimental ‘cloud computing’ services. Research partners include the Infocomm Development Authority of Singapore (IDA), the University of Illinois at Urbana-Champaign and the Karlsruhe Institute of Technology in Germany.
“With this test bed, not only can researchers test applications at Internet scale, they will also have access to the underlying computing systems to advance understanding of how systems software and hardware function in a cloud environment,” said Prabhakar Raghavan, head of Yahoo! Research.
vulnerable software: VMware Workstation 6.0 for Windows, possible some other VMware products as well type of vulnerability: DoS, potential privilege escalation I found a vulnerability in VMware Workstation 6.0 which allows an unprivileged user in the host OS to crash the system and potentially run arbitrary code with kernel privileges. The issue is in the vmstor-60 driver, which is supposed to mount VMware images within the host OS. When sending the IOCTL code FsSetVoleInformation with subcode FsSetFileInformation with a large buffer and underreporting its size to at max 1024 bytes, it will underrun and potentially execute arbitrary code. Security focus
Comments
Post a Comment