Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.801948
Category:General
Title:VMware Products Multiple Vulnerabilities (Windows) - jun 11
Summary:The host is installed with VMWare product(s) which are vulnerable; to multiple vulnerabilities.
Description:Summary:
The host is installed with VMWare product(s) which are vulnerable
to multiple vulnerabilities.

Vulnerability Insight:
Multiple flaws are due to:

- An information disclosure vulnerability in 'Mount.vmhgfs', allows guest OS
users to determine the existence of host OS files and directories via
unspecified vectors.

- A race condition privilege escalation in 'Mount.vmhgfs' via a race condition,
that allows guest OS users to gain privileges on the guest OS by mounting a
file system on top of an arbitrary directory.

Vulnerability Impact:
Successful exploitation allows attackers to gain privileges on the guest OS.

Affected Software/OS:
VMware Player 3.1.x before 3.1.4

VMware Workstation 7.1.x before 7.1.4 on Windows.

Solution:
Apply the patch or upgrade to player 3.1.4 or later.

Apply the patch or upgrade to VMware Workstation 7.1.4 or later.

CVSS Score:
6.9

CVSS Vector:
AV:L/AC:M/Au:N/C:C/I:C/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2011-1787
BugTraq ID: 48098
http://www.securityfocus.com/bid/48098
http://www.securitytracker.com/id?1025601
http://secunia.com/advisories/44840
http://secunia.com/advisories/44904
SuSE Security Announcement: openSUSE-SU-2011:0617 (Google Search)
https://hermes.opensuse.org/messages/8711677
Common Vulnerability Exposure (CVE) ID: CVE-2011-2146
XForce ISS Database: vmware-mountvmhgfs-info-disc(67813)
https://exchange.xforce.ibmcloud.com/vulnerabilities/67813
CopyrightCopyright (C) 2011 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.