Skip to content

VMware issues alert over potential ESX source code exposure

Leaked ESX virtualisation platform source code files from an old version of VMware have been publicly shared online, as confirmed by the company. A file link for the stolen data, allegedly belonging to VMware, was disseminated.

Uncovered ESX source code breach raises alarms for VMware
Uncovered ESX source code breach raises alarms for VMware

VMware issues alert over potential ESX source code exposure

VMware, a leading virtualisation software company, has confirmed a leak of source code files for an old version of its ESX virtualisation platform, dated back to 2004. The leaked files were posted online by an Anonymous-affiliated hacker named Stun.

According to VMware, the leak does not necessarily mean an increased risk to its customers. Iain Mulholland, VMware's director of platform security, advised customers to apply the latest product updates and security patches to best protect their environments.

The leaked files contain the VMKernel, as claimed by Stun. This kernel was used between 1998 and 2004. Stun also stated that while the kernel may be considered old, some core functionality might still remain the same.

In a separate incident, Stun claimed to have leaked the source code for Symantec's Norton Utilities 2006 desktop security software. However, there is no publicly available information identifying any person or organization that may have stolen the source code files for Norton Utilities 2006 Desktop Security software from Symantec.

CEIEC, the China Electronics Import & Export Corporation, described Hardcore Charlie's claim as "totally groundless, highly subjective, and defamatory". Hardcore Charlie, a different hacker, claimed to have stolen the previous source code file from CEIEC in March.

Mulholland also mentioned the possibility of more related files being posted in the future. The download link to the leaked files was posted on Twitter by Stun.

Despite the leak, VMware has maintained that the risk to its customers is minimal. The company has reassured its users that it continues to focus on providing secure and reliable virtualisation solutions. The latest product updates and security patches are available for customers to download and apply to their systems.

Read also:

Latest