PT-2014-5732 · Vmware · Vmware Tools+1

Publicado 2014-08-28 · Atualizado 2017-08-29 · CVE-2014-4200

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions VMware Tools versions prior to the version that fixes the issue in VMware Workstation through 10.0.3

Description The issue allows local users to obtain sensitive information by extracting files from the vm-support archive due to the use of 0644 permissions.

Recommendations For versions prior to the fixed version, consider changing the permissions of the vm-support archive to prevent unauthorized access until a patch is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-4200

Produtos afetados

Vmware Tools

Vmware Workstation

Referências · 9

• 🔥 http://seclists.org/fulldisclosure/2014/Aug/71 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4200 · Nota
• https://security-tracker.debian.org/tracker/CVE-2014-4200 · Aviso do Fabricante
• http://securityfocus.com/bid/69410 · Nota
• http://securitytracker.com/id/1030758 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95494 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-4200 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-4200 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2014-4200 · Aviso do Fabricante