VMware Products Multiple Vulnerabilities
BID:28289
Info
VMware Products Multiple Vulnerabilities
| Bugtraq ID: | 28289 |
| Class: | Unknown |
| CVE: |
CVE-2007-5618 CVE-2008-1364 CVE-2008-1340 |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 17 2008 12:00AM |
| Updated: | Mar 18 2008 03:50PM |
| Credit: | The vendor credits Andrew Honig, Martin O'Neal, Ray Hicken and David Maciejak with the discovery of these issues. |
| Vulnerable: |
VMWare Workstation 6.0.2 VMWare Workstation 6.0.1 VMWare Workstation 6.0 VMWare Workstation 5.5.5 VMWare Workstation 5.5.4 build 44386 VMWare Workstation 5.5.4 VMWare Workstation 5.5.3 build 42958 VMWare Workstation 5.5.3 build 34685 VMWare Server 1.0.4 VMWare Server 1.0.3 VMWare Server 1.0.2 VMWare Player 2.0.2 VMWare Player 2.0.1 VMWare Player 2.0 VMWare Player 1.0.5 VMWare Player 1.0.4 VMWare Player 1.0.3 VMWare Player 1.0.2 VMWare ACE 2.0 VMWare ACE 1.0 |
| Not Vulnerable: |
VMWare Workstation 6.0.3 Build 80004 VMWare Workstation 5.5.6 Build 80404 VMWare Server 1.0.5 Build 80187 VMWare Player 2.0.3 Build 80004 VMWare Player 1.0.6 Build 80404 VMWare ACE 2.0.3 VMWare ACE 1.0.5 |
Discussion
VMware Products Multiple Vulnerabilities
VMware products are prone to multiple vulnerabilities, including privilege-escalation and denial-of-service issues.
Successful attacks will allow attackers to gain elevated privileges and to deny service to legitimate users.
The following are vulnerable:
VMware Workstation 6.0.2 and earlier
VMware Workstation 5.5.4 and earlier
VMware Player 2.0.2 and earlier
VMware Player 1.0.4 and earlier
VMware Server 1.0.4 and earlier
VMware ACE 2.0.2 and earlier
VMware ACE 1.0.2 and earlier
VMware products are prone to multiple vulnerabilities, including privilege-escalation and denial-of-service issues.
Successful attacks will allow attackers to gain elevated privileges and to deny service to legitimate users.
The following are vulnerable:
VMware Workstation 6.0.2 and earlier
VMware Workstation 5.5.4 and earlier
VMware Player 2.0.2 and earlier
VMware Player 1.0.4 and earlier
VMware Server 1.0.4 and earlier
VMware ACE 2.0.2 and earlier
VMware ACE 1.0.2 and earlier
Exploit / POC
VMware Products Multiple Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
VMware Products Multiple Vulnerabilities
Solution:
The vendor released fixes to address these issues. Please see the references for more information.
Solution:
The vendor released fixes to address these issues. Please see the references for more information.
References
VMware Products Multiple Vulnerabilities
References:
References:
- VMware Homepage (VMware)
- VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware (VMware Security team