Multiple VMware products 'vmware-mount' Local Privilege Escalation Vulnerability

Bugtraq ID:	45167
Class:	Design Error
CVE:	CVE-2010-4295
Remote:	No
Local:	Yes
Published:	Dec 03 2010 12:00AM
Updated:	Dec 03 2010 12:00AM
Credit:	Dan Rosenberg
Vulnerable:	VMWare Workstation 7.1 VMWare Workstation 7.0.1 build 227600 VMWare Workstation 7.0 VMWare Server 2.0.2 VMWare Player 3.1 VMWare Player 3.1 VMWare Fusion 3.1
Not Vulnerable:	VMWare Workstation 7.1.2 Build 301548 VMWare Player 3.1.2 build 301548 VMWare Fusion 3.1.2 Build 332101

Multiple VMware products 'vmware-mount' Local Privilege Escalation Vulnerability

Multiple VMware products are prone to a local privilege-escalation vulnerability.

Local attackers can exploit this issue to execute arbitrary code with elevated privileges; this may aid in other attacks. This issue only affects host systems.

The following versions are vulnerable:

VMWare Workstation versions 7.x for Linux
VMWare Player versions 3.1.x for Linux
VMWare Server versions 2.0.2 for Linux
VMWare Fusion versions 3.1.x for Mac OS/X

Multiple VMware products 'vmware-mount' Local Privilege Escalation Vulnerability

An attacker requires local interactive access to a guest operating system to exploit this issue.

Multiple VMware products 'vmware-mount' Local Privilege Escalation Vulnerability

Solution:
The vendor has released an advisory and patches. Please see the references for more information.

Multiple VMware products 'vmware-mount' Local Privilege Escalation Vulnerability

References:

• VMSA-2010-0018 (VMWare)
  
• VMware Homepage (VMware)