VMware ESX and ESXi Virtual Machine File Descriptors Local Privilege Escalation Vulnerability

Bugtraq ID:	64491
Class:	Unknown
CVE:	CVE-2013-5973
Remote:	No
Local:	Yes
Published:	Dec 22 2013 12:00AM
Updated:	Dec 22 2013 12:00AM
Credit:	Shanon Olsson via JPCERT
Vulnerable:	VMWare ESXi 5.0 VMWare ESXi 4.1 VMWare ESXi 4.0 VMWare ESX 4.1 VMWare ESX 4.0
Not Vulnerable:

VMware ESX and ESXi Virtual Machine File Descriptors Local Privilege Escalation Vulnerability

VMware ESX and ESXi are prone to a local privilege-escalation vulnerability.

Local attackers could potentially exploit this issue to execute arbitrary code with elevated privileges in the context of the affected application.

Following versions are vulnerable:

VMware ESX 4.0 and 4.1
VMware ESXi 4.0, 4.1, 5.0, 5.1, and 5.5

VMware ESX and ESXi Virtual Machine File Descriptors Local Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

VMware ESX and ESXi Virtual Machine File Descriptors Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

VMware ESX and ESXi Virtual Machine File Descriptors Local Privilege Escalation Vulnerability

References:

• VMware Homepage (VMware)