VMware has confirmed that source code posted on PasteBin by a hacker calling himself “Hardcore Charlie”, is a portion of code from its ESX Hypervisor product.
An advisory posted on VMware’s website, explains that its security team had become aware that a single file from the VMware ESX source code had been posted publicly.
VMware’s statement acknowledged that more files may be posted in the future, but attempted to reassure customers by explaining that the published code dated from 2003/2004.
According to Iain Mulholland, director of VMware’s Security Response Center, “the fact that the source code may have been publicly shared does not necessarily mean that there is any increased risk to VMware customers.”
There is some mystery, however, as to exactly whose security was breached for the source code to fall into the hands of hackers. According to…
Read more in my article on the Naked Security website.
Found this article interesting? Follow Graham Cluley on Twitter or Mastodon to read more of the exclusive content we post.