VMware Partition Table Deletion Denial of Service Vulnerability

Bugtraq ID:	19551
Class:	Design Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Aug 15 2006 12:00AM
Updated:	Aug 17 2006 06:15PM
Credit:	This issue was disclosed by nop.
Vulnerable:	VMWare Workstation 5.5.1 Build 19175
Not Vulnerable:

VMware Partition Table Deletion Denial of Service Vulnerability

VMware is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to destroy partition tables on the affected computer and to deny service to legitimate users.

This issue affects VMware version 5.5.1; other versions may also be vulnerable for Windows.

VMware Partition Table Deletion Denial of Service Vulnerability

Attackers may trigger this issue using a web browser.

A sample exploit has been provided:

• /data/vulnerabilities/exploits/vmware-5.5.1-partition-table-overwrite.html

VMware Partition Table Deletion Denial of Service Vulnerability

Solution:
Currently we are not aware of any fixes for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

The reporter of this issue states that vendor fixes are available, but Symantec has not confirmed this. Users of affected packages should contact the vendor for more information.

VMware Partition Table Deletion Denial of Service Vulnerability

References:

• VMware Homepage (VMware)
  
• [XSec-06-05]: VMware 5.5.1 for Windows arbitrary partition table delete issue. (root )