VMware Tools HGFS.Sys Local Privilege Escalation Vulnerability
BID:26556
Info
VMware Tools HGFS.Sys Local Privilege Escalation Vulnerability
| Bugtraq ID: | 26556 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 24 2007 12:00AM |
| Updated: | Nov 26 2007 03:54PM |
| Credit: | SoBeIt is credited with the discovery of this vulnerability. |
| Vulnerable: |
VMWare VMWare Tools 3.1 VMWare VMWare Tools 0 |
| Not Vulnerable: | |
Discussion
VMware Tools HGFS.Sys Local Privilege Escalation Vulnerability
VMware Tools is prone to a privilege-escalation vulnerability.
The application fails to properly drop privileges before performing certain functions. An attacker can exploit this in the guest opertaing system to elevate privileges in the host operating system.
VMware Tools is prone to a privilege-escalation vulnerability.
The application fails to properly drop privileges before performing certain functions. An attacker can exploit this in the guest opertaing system to elevate privileges in the host operating system.
Exploit / POC
VMware Tools HGFS.Sys Local Privilege Escalation Vulnerability
The following exploit code is available:
The following exploit code is available:
Solution / Fix
VMware Tools HGFS.Sys Local Privilege Escalation Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].