VMWare Remote Arbitrary Code Execution Vulnerability
BID:15998
Info
VMWare Remote Arbitrary Code Execution Vulnerability
| Bugtraq ID: | 15998 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2005-4459 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 21 2005 12:00AM |
| Updated: | Jan 10 2006 11:31PM |
| Credit: | Discovered by Tim Shelton. |
| Vulnerable: |
VMWare Workstation 5.0 .0 build-13124 VMWare Workstation 4.5.2 VMWare Workstation 4.0.2 VMWare Workstation 4.0.1 VMWare Workstation 4.0 VMWare Workstation 3.4 VMWare Workstation 3.2.1 patch 1 VMWare Player VMWare GSX Server 3.1 VMWare GSX Server 3.0 build 7592 VMWare GSX Server 3.0 VMWare GSX Server 2.5.2 VMWare GSX Server 2.5.1 build 5336 VMWare GSX Server 2.5.1 VMWare GSX Server 2.0.1 build 2129 VMWare GSX Server 2.0 VMWare ACE 1.0 Gentoo Linux |
| Not Vulnerable: |
VMWare Workstation 5.5.1 Build 19175 VMWare Player 1.0.1 Build 19317 VMWare GSX Server 3.2.1 Build 19281 VMWare ACE 1.0.2 Build 19206 |
Discussion
VMWare Remote Arbitrary Code Execution Vulnerability
Multiple VMWare products are affected by a remote arbitrary code execution vulnerability.
Successful exploitation can allow an attacker to execute arbitrary code on the vulnerable computer hosting VMWare. This may result in a complete compromise.
This issue affects VMWare Workstation, VMWare GSX Server, VMWare ACE, and VMWare Player.
Multiple VMWare products are affected by a remote arbitrary code execution vulnerability.
Successful exploitation can allow an attacker to execute arbitrary code on the vulnerable computer hosting VMWare. This may result in a complete compromise.
This issue affects VMWare Workstation, VMWare GSX Server, VMWare ACE, and VMWare Player.
Exploit / POC
VMWare Remote Arbitrary Code Execution Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
VMWare Remote Arbitrary Code Execution Vulnerability
Solution:
The vendor has released upgrades to address this issue. Users should contact the vendor to obtain upgrades.
Gentoo Linux has released security advisory GLSA 200601-04 addressing this issue. Gentoo recommends all VMware Workstation users should upgrade to a fixed version:
# emerge --sync
# emerge --ask --oneshot --verbose app-emulation/vmware-workstation
Solution:
The vendor has released upgrades to address this issue. Users should contact the vendor to obtain upgrades.
Gentoo Linux has released security advisory GLSA 200601-04 addressing this issue. Gentoo recommends all VMware Workstation users should upgrade to a fixed version:
# emerge --sync
# emerge --ask --oneshot --verbose app-emulation/vmware-workstation
References
VMWare Remote Arbitrary Code Execution Vulnerability
References:
References: