VMWare TMP Directory License Information Vulnerability

Bugtraq ID:	3119
Class:	Configuration Error
CVE:
Remote:	No
Local:	Yes
Published:	Jul 30 2001 12:00AM
Updated:	Jul 30 2001 12:00AM
Credit:	This vulnerability was announced by starman jones <[email protected]> on July 30, 2001.
Vulnerable:	VMWare VMWare 2.0 - Caldera OpenLinux 2.4 - Caldera OpenLinux 2.4 - Caldera OpenLinux 2.3 - Caldera OpenLinux 2.3 - Mandriva Linux Mandrake 8.0 - Mandriva Linux Mandrake 8.0 - Redhat Linux 7.1 - Redhat Linux 7.1 - Redhat Linux 7.0 - Redhat Linux 7.0 - Redhat Linux 6.1 - Redhat Linux 5.2 - Redhat Linux 5.2 - Redhat Linux 6.2 - Redhat Linux 6.2 - SuSE Linux 7.1 - SuSE Linux 7.1 - SuSE Linux 7.0 - SuSE Linux 7.0 - SuSE Linux 6.4 - SuSE Linux 6.4 - SuSE Linux 6.3 - SuSE Linux 6.3 - SuSE Linux 6.2 - SuSE Linux 6.2 - SuSE Linux 6.1 - SuSE Linux 6.1 - SuSE Linux 6.0 - SuSE Linux 6.0
Not Vulnerable:

VMWare TMP Directory License Information Vulnerability

VMware is a Virtual Machine software package maintained and distributed by VMware, Incorporated.

VMware reveals sensitive information about it's users on a system. After installation and input of license data, VMware creates a file in /tmp with the name vmware-log.username, where username is the user of VMware. This file contains information about the user of VMware, including the VMware registration key.

VMWare TMP Directory License Information Vulnerability

See discussion.

VMWare TMP Directory License Information Vulnerability

VMWare TMP Directory License Information Vulnerability

References: