Multiple VMware products 'vmware-mount' Local Privilege Escalation Vulnerability

Bugtraq ID:	45168
Class:	Design Error
CVE:	CVE-2010-4296
Remote:	No
Local:	Yes
Published:	Dec 03 2010 12:00AM
Updated:	Dec 03 2010 12:00AM
Credit:	Martin Carpenter
Vulnerable:	VMWare Workstation 7.1 VMWare Workstation 7.0.1 build 227600 VMWare Workstation 7.0 VMWare Server 2.0.2 VMWare Player 3.1.2 build 301548 VMWare Player 3.1 VMWare Fusion 3.1
Not Vulnerable:	VMWare Workstation 7.1.2 Build 301548 VMWare Player 3.1.2 Build 3 VMWare Fusion 3.1.2 Build 3

Multiple VMware products 'vmware-mount' Local Privilege Escalation Vulnerability

Multiple VMware products are prone to a local privilege-escalation vulnerability.

Local attackers can exploit this issue to execute arbitrary code with elevated privileges; this may aid in other attacks. This issue only affects host systems.

The following versions are vulnerable:

Workstation versions 7.x for Linux
Player versions 3.1.x for Linux
Server versions 2.0.2 for Linux
Fusion versions 3.1.x for Mac OS/X

Multiple VMware products 'vmware-mount' Local Privilege Escalation Vulnerability

An attacker requires local interactive access to a guest operating system to exploit this issue.

Multiple VMware products 'vmware-mount' Local Privilege Escalation Vulnerability

Solution:
The vendor has released an advisory and patches. Please see the references for more information.

Multiple VMware products 'vmware-mount' Local Privilege Escalation Vulnerability

References:

• VMSA-2010-0018 (VMWare)
  
• VMware Homepage (VMware)