VMware GSX Server/Workstation Host Operating System Compromise Vulnerability
BID:8264
Info
VMware GSX Server/Workstation Host Operating System Compromise Vulnerability
| Bugtraq ID: | 8264 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 23 2003 12:00AM |
| Updated: | Jul 23 2003 12:00AM |
| Credit: | Discovery is credited to Paul Szabo. |
| Vulnerable: |
VMWare Workstation 4.0 VMWare GSX Server 2.5.1 |
| Not Vulnerable: |
VMWare Workstation 4.0.1 VMWare Workstation 3.2.1 patch 1 |
Discussion
VMware GSX Server/Workstation Host Operating System Compromise Vulnerability
VMware GSX Server/Workstation is prone to an issue that malicious local users may be able to exploit to gain elevated privileges on the host operating system. The vendor has reported that this vulnerability can be exploited manipulating environment variables to execute programs with elevated privileges on the host operating system.
This issue affects the software on Linux platforms only.
VMware GSX Server/Workstation is prone to an issue that malicious local users may be able to exploit to gain elevated privileges on the host operating system. The vendor has reported that this vulnerability can be exploited manipulating environment variables to execute programs with elevated privileges on the host operating system.
This issue affects the software on Linux platforms only.
Exploit / POC
VMware GSX Server/Workstation Host Operating System Compromise Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
VMware GSX Server/Workstation Host Operating System Compromise Vulnerability
Solution:
The vendor has addressed this issue in GSX Server 2.5.1 patch 1 / VMWare Workstation 4.0.1. Users are advised to contact the vendor for upgrade details.
** August 02, 2003: VMWare has released a new version of VMWare Workstation that is not vulnerable, Workstation 3.2.1 patch 1. It is available at:
http://www.vmware.com/vmwarestore/newstore/download.jsp?ProductCode=WKST3-LX-ESD
Upgrade instructions are available at:
http://www.vmware.com/support/ws3/doc/upgrade_ws.html
Gentoo has released a new security advisory (200308-03.1) to address this issue. It has been discovered that the previously announced upgrade did not in fact address this vulnerability. As a result, Gentoo users affected by this issue are advised to upgrade by issuing the following series of commands:
emerge sync
emerge \=app-emulation/vmware-workstation/vmware-workstation-4.0.2.5592
emerge clean
See new advisory for further details.
Solution:
The vendor has addressed this issue in GSX Server 2.5.1 patch 1 / VMWare Workstation 4.0.1. Users are advised to contact the vendor for upgrade details.
** August 02, 2003: VMWare has released a new version of VMWare Workstation that is not vulnerable, Workstation 3.2.1 patch 1. It is available at:
http://www.vmware.com/vmwarestore/newstore/download.jsp?ProductCode=WKST3-LX-ESD
Upgrade instructions are available at:
http://www.vmware.com/support/ws3/doc/upgrade_ws.html
Gentoo has released a new security advisory (200308-03.1) to address this issue. It has been discovered that the previously announced upgrade did not in fact address this vulnerability. As a result, Gentoo users affected by this issue are advised to upgrade by issuing the following series of commands:
emerge sync
emerge \=app-emulation/vmware-workstation/vmware-workstation-4.0.2.5592
emerge clean
See new advisory for further details.
References
VMware GSX Server/Workstation Host Operating System Compromise Vulnerability
References:
References: