Security Basics: Re: Virtual environments security

["Alexey Eremenko" <al4321 () gmail com>]

On 12/14/06, Octavian Popescu <sigquit () yahoo com> wrote:
> Hi,
>
> Any idea about some good resources on the subject? (VMware, Virtual PC/Server security etc) I'm interested most of all 
> in studies towards the possibility of breaking the virtual env. and directly accessing the hw resources but other 
> general info should be just fine.
This is doable either via:
-Virtual Network (only if it's configured in the VM software)
or
-Bugs in the VM Software

(for example VirtualPC crashes with certain commands - esp. while
playing TuxRacer on Mandrake Linux 9.2 :) - maybe those bugs can be
exploited to get control over the real environment. )

-Technologov

---------------------------------------------------------------------------
This list is sponsored by: ByteCrusher

Detect Malicious Web Content and Exploits in Real-Time.
Anti-Virus engines can't detect unknown or new threats.
LinkScanner can. Web surfing just became a whole lot safer.

http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetect
---------------------------------------------------------------------------