PT-2009-3496 · Vmware · Vmware Host Guest File System+1

Emmanouel Kellinis · Published 2009-04-06 · Updated 2017-09-29 · CVE-2009-0908

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions VMware ACE versions 2.5.1 and earlier

Description The issue concerns an unspecified vulnerability in the ACE shared folders implementation within the VMware Host Guest File System (HGFS) shared folders feature. This vulnerability allows attackers to enable a disabled shared folder.

Recommendations For versions 2.5.1 and earlier, consider disabling the HGFS shared folders feature until a patch is available. Restrict access to shared folders to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2009-0908

Affected Products

Vmware Ace

Vmware Host Guest File System

References · 8

• http://seclists.org/fulldisclosure/2009/Apr/0036.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2009-0908 · Security Note
• http://lists.vmware.com/pipermail/security-announce/2009/000054.html · Vendor Advisory
• http://securityfocus.com/bid/34373 · Note
• http://securitytracker.com/id?1021975 · Note
• http://vupen.com/english/advisories/2009/0944 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6399 · Note
• http://vmware.com/security/advisories/VMSA-2009-0005.html · Note