PT-2011-3368 · Vmware · Vmware Esxi+3

Published 2011-06-06 · Updated 2014-11-14 · CVE-2011-1787

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 7.1.x through 7.1.3 VMware Player versions 3.1.x through 3.1.3 VMware Fusion versions 3.1.x through 3.1.2 VMware ESXi versions 3.5 through 4.1 VMware ESX versions 3.0.3 through 4.1

Description A race condition exists in the mount.vmhgfs component of the VMware Host Guest File System (HGFS), allowing guest OS users to gain privileges on the guest OS. This is achieved by mounting a filesystem on top of an arbitrary directory.

Recommendations For VMware Workstation versions 7.1.x through 7.1.3, update to version 7.1.4 or later. For VMware Player versions 3.1.x through 3.1.3, update to version 3.1.4 or later. For VMware Fusion versions 3.1.x through 3.1.2, update to version 3.1.3 or later. For VMware ESXi versions 3.5 through 4.1, apply the relevant patch or update. For VMware ESX versions 3.0.3 through 4.1, apply the relevant patch or update.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2011-1787

Affected Products

Vmware Esxi

Vmware Fusion

Vmware Player

Vmware Workstation

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2011-1787 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1787 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-1787 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-1787 · Vendor Advisory
• http://vmware.com/security/advisories/VMSA-2011-0009.html · Vendor Advisory
• https://hermes.opensuse.org/messages/8711677 · Vendor Advisory
• http://secunia.com/advisories/44904 · Note
• http://secunia.com/advisories/44840 · Note
• http://securitytracker.com/id?1025601 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1787 · Note
• http://securityfocus.com/bid/48098 · Note