PT-2011-1001 · Vmware · Vmware Workstation+1

Publicado 2011-04-01 · Atualizado 2018-10-09 · CVE-2011-1126

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware VIX API versions prior to 1.10.3 VMware Workstation versions 6.5.x through 7.1.4 build 385536

Description The issue allows local users to potentially gain privileges via a Trojan horse shared library in an unspecified directory. This could enable an attacker to control the execution of the vmrun utility, which is used to perform various actions on virtual machines.

Recommendations For VMware VIX API versions prior to 1.10.3, update to version 1.10.3 or later. For VMware Workstation versions 6.5.x through 7.1.4 build 385536, update to a version after 7.1.4 build 385536.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2014-00005

CVE-2011-1126

Produtos afetados

Vmware Vix Api

Vmware Workstation

Referências · 13

• http://lists.vmware.com/pipermail/security-announce/2011/000131.html · Aviso do Fabricante
• http://securityreason.com/securityalert/8173 · Nota
• http://vmware.com/security/advisories/VMSA-2011-0006.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2014-00005 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66472 · Nota
• http://secunia.com/advisories/43885 · Aviso do Fabricante
• http://securityfocus.com/bid/47094 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1126 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1126 · Nota
• http://securitytracker.com/id?1025270 · Nota
• http://vupen.com/english/advisories/2011/0816 · Aviso do Fabricante
• http://secunia.com/advisories/43943 · Aviso do Fabricante
• http://securityfocus.com/archive/1/517240/100/0/threaded · Nota