PT-2010-5403 · Vmware · Vmware Player+3

Publicado 2010-12-06 · Atualizado 2022-12-14 · CVE-2010-4295

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 7.0 through 7.1.2 build 301547 VMware Player versions 3.1.x through 3.1.2 build 301547 VMware Server version 2.0.2 VMware Fusion versions 3.1.x through 3.1.2 build 332100

Description A race condition exists in the mounting process of vmware-mount, allowing host OS users to gain privileges via vectors involving temporary files.

Recommendations For VMware Workstation versions 7.0 through 7.1.2 build 301547, update to version 7.1.2 build 301548 or later. For VMware Player versions 3.1.x through 3.1.2 build 301547, update to version 3.1.2 build 301548 or later. For VMware Server version 2.0.2, update to a version that includes the fix for this issue. For VMware Fusion versions 3.1.x through 3.1.2 build 332100, update to version 3.1.2 build 332101 or later.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2010-4295

Produtos afetados

Vmware Fusion

Vmware Player

Vmware Server

Vmware Workstation

Referências · 12

• https://nvd.nist.gov/vuln/detail/CVE-2010-4295 · Nota de Segurança
• http://osvdb.org/69585 · Nota
• http://securityfocus.com/archive/1/514995/100/0/threaded · Nota
• http://securityfocus.com/bid/45167 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4295 · Nota
• http://vupen.com/english/advisories/2010/3116 · Aviso do Fabricante
• http://secunia.com/advisories/42482 · Aviso do Fabricante
• http://securitytracker.com/id?1024819 · Nota
• http://secunia.com/advisories/42453 · Aviso do Fabricante
• http://securitytracker.com/id?1024820 · Nota
• http://vmware.com/security/advisories/VMSA-2010-0018.html · Aviso do Fabricante
• http://lists.vmware.com/pipermail/security-announce/2010/000112.html · Aviso do Fabricante