PT-2007-2484 · Vmware · Vmware Workstation

Publicado 2007-02-21 · Atualizado 2018-10-16 · CVE-2007-1056

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: VMware Workstation version 5.5.3 build 34685

Description: The issue allows local users to perform restricted operations, including changing system time, accessing hardware components, and stopping the "VMware tools service" service. This is due to the lack of per-user restrictions on certain privileged actions. Exploitation is simplified by weak file permissions for %PROGRAMFILES%VMware and weak registry key permissions for various services, including vmmouse, vmscsi, VMTools, vmx svga, and vmxnet in HKLMSYSTEMCurrentControlSetServices. This allows local users to execute certain files under %PROGRAMFILES%VMwareVMware Tools, such as VMControlPanel.cpl and vmwareservice.exe, to perform privileged actions outside of the guest OS.

Recommendations: For VMware Workstation version 5.5.3 build 34685, consider restricting access to the vulnerable services, including vmmouse, vmscsi, VMTools, vmx svga, and vmxnet, and apply proper file permissions to %PROGRAMFILES%VMware to prevent unauthorized execution of files such as VMControlPanel.cpl and vmwareservice.exe. Additionally, ensure that only authorized users have access to the "VMware tools service" service to prevent it from being stopped or modified.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-1056

Produtos afetados

Vmware Workstation

Referências · 6

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1056 · Nota
• http://securityfocus.com/archive/1/460664/100/0/threaded · Nota
• http://securityreason.com/securityalert/2281 · Nota
• http://securityfocus.com/archive/1/461807/100/0/threaded · Nota
• http://osvdb.org/45244 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1056 · Nota de Segurança