ID: IRCNE2012111669
Date: 2012-11-06
According to "zdnet", hackers associated with the Anonymous collective have leaked the source code for the VMware ESX Server kernel on the Web.
Dutch hacker, going by the name "Stun," tweeted a link to a torrent file earlier today, which downloads at just shy of 2MB (compressed) in size, which contains a bevy of source code files. The kernel is believed to be dated between 1998 and 2004, but writing in a comment, the hacker said that, "kernels don't change that much in programs, they get extended or adapted but some core functionality still stays the same."
It is understood that this is the same hacker who leaked Symantec's Norton anti-virus source code earlier this year, in which the security software giant admitted that only a "segment" of code had been leaked.
VMware ESX Server is an virtualization software suite designed for enterprise environments.
Earlier this year, another hacker posted fragments of the ESX software online, after he claimed to be in possession of 300MB worth of VMware source code and other internal data from other companies.
Alongside this, a VMware blog post published earlier today confirmed that the company's security team was made aware of the VMware ESX source code leak today, and noted that today's release dates back to the source code fragments published earlier this year in April.
VMware platform security director Iain Mulholland warned that "more related files will be posted in the future" and the firm takes "customer security seriously and have engaged our VMware Security Response Center to thoroughly investigate."
The virtualization giant encourages users to update their products with the latest product updates and security patches, should the source code be used by malware writers to attack the platform.
- 6