PT-2011-3368 · Vmware · Vmware Esxi+3

Publicado 2011-06-06 · Atualizado 2014-11-14 · CVE-2011-1787

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 7.1.x through 7.1.3 VMware Player versions 3.1.x through 3.1.3 VMware Fusion versions 3.1.x through 3.1.2 VMware ESXi versions 3.5 through 4.1 VMware ESX versions 3.0.3 through 4.1

Description A race condition exists in the mount.vmhgfs component of the VMware Host Guest File System (HGFS), allowing guest OS users to gain privileges on the guest OS. This is achieved by mounting a filesystem on top of an arbitrary directory.

Recommendations For VMware Workstation versions 7.1.x through 7.1.3, update to version 7.1.4 or later. For VMware Player versions 3.1.x through 3.1.3, update to version 3.1.4 or later. For VMware Fusion versions 3.1.x through 3.1.2, update to version 3.1.3 or later. For VMware ESXi versions 3.5 through 4.1, apply the relevant patch or update. For VMware ESX versions 3.0.3 through 4.1, apply the relevant patch or update.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2011-1787

Produtos afetados

Vmware Esxi

Vmware Fusion

Vmware Player

Vmware Workstation

Referências · 11

• https://nvd.nist.gov/vuln/detail/CVE-2011-1787 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1787 · Aviso do Fabricante
• http://secunia.com/advisories/44904 · Nota
• https://security-tracker.debian.org/tracker/CVE-2011-1787 · Aviso do Fabricante
• http://secunia.com/advisories/44840 · Nota
• https://osv.dev/vulnerability/CVE-2011-1787 · Aviso do Fabricante
• http://securitytracker.com/id?1025601 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1787 · Nota
• http://vmware.com/security/advisories/VMSA-2011-0009.html · Aviso do Fabricante
• http://securityfocus.com/bid/48098 · Nota
• https://hermes.opensuse.org/messages/8711677 · Aviso do Fabricante