PT-2022-7720 · Vmware · Open-Vm-Tools

Thomas Biege · Published 2022-11-23 · Updated 2022-11-28 · CVE-2009-1142

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions open-vm-tools version 2009.03.18-154848

Description An issue was discovered in open-vm-tools where local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory function is enabled.

Recommendations For open-vm-tools version 2009.03.18-154848, consider disabling the ChmodChownDirectory function or removing the setuid root bit from vmware-user-suid-wrapper as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2009-1142

Affected Products

Open-Vm-Tools

References · 9

• https://security-tracker.debian.org/tracker/CVE-2009-1142 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-1142 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1142 · Security Note
• https://osv.dev/vulnerability/CVE-2009-1142 · Vendor Advisory
• https://github.com/vmware/open-vm-tools/releases/tag/2009.03.18-154848 · Note
• https://t.me/cvenotify/38350 · Telegram Post
• https://bugs.gentoo.org/264577 · Note
• https://t.me/cvenotify/38597 · Telegram Post
• https://t.me/cibsecurity/53451 · Telegram Post