VMware said its security Relevant Products/Services team became aware of the public posting of a single file from the ESX source code, as well as the possibility that more files may be posted in the future, on Monday. The company revealed that the posted code and associated commentary dates to the 2003 to 2004 time frame.
Iain Mulholland, director of the VMware Security Response Center, was quick to say that just because source code may have been publicly shared does not necessarily mean that there is any increased risk to VMware customers.