PT-2008-2973 · Vmware · Vmware Player+2

Publicado 2008-03-20 · Atualizado 2018-10-11 · CVE-2008-1392

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware Workstation version 6.0.2 VMware Player versions 2.0.x through 2.0.2 VMware ACE versions 2.0.x through 2.0.0

Description The default configuration of the affected software makes the console of the guest OS accessible through anonymous VIX API calls. The impact and attack vectors of this issue are unknown.

Recommendations For VMware Workstation version 6.0.2, update to a version that addresses this issue. For VMware Player versions 2.0.x through 2.0.2, update to version 2.0.3 or later. For VMware ACE versions 2.0.x through 2.0.0, update to version 2.0.1 or later.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2008-1392

Produtos afetados

Vmware Ace

Vmware Player

Vmware Workstation

Referências · 12

• http://vmware.com/security/advisories/VMSA-2008-0005.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1392 · Nota
• http://lists.vmware.com/pipermail/security-announce/2008/000008.html · Nota
• http://vmware.com/support/ws6/doc/releasenotes_ws6.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41551 · Nota
• http://securityfocus.com/archive/1/489739/100/0/threaded · Nota
• http://securityfocus.com/bid/28276 · Nota
• http://securityreason.com/securityalert/3755 · Nota
• http://vmware.com/support/player2/doc/releasenotes_player2.html · Aviso do Fabricante
• http://vmware.com/support/ace2/doc/releasenotes_ace2.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-1392 · Nota de Segurança
• http://security.gentoo.org/glsa/glsa-201209-25.xml · Aviso do Fabricante