CVE-2010-4295

Опубликовано: 06 дек. 2010

Источник: nvd

CVSS2: 6.9

EPSS Низкий

Описание

Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via vectors involving temporary files.

Ссылки

http://lists.vmware.com/pipermail/security-announce/2010/000112.html
Mailing List
Vendor Advisory
http://osvdb.org/69585
Broken Link
http://secunia.com/advisories/42453
Broken Link
Vendor Advisory
http://secunia.com/advisories/42482
Broken Link
Vendor Advisory
http://www.securityfocus.com/archive/1/514995/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/45167
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1024819
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1024820
Broken Link
Third Party Advisory
VDB Entry
http://www.vmware.com/security/advisories/VMSA-2010-0018.html
Vendor Advisory
http://www.vupen.com/english/advisories/2010/3116
Broken Link
Vendor Advisory
http://lists.vmware.com/pipermail/security-announce/2010/000112.html
Mailing List
Vendor Advisory
http://osvdb.org/69585
Broken Link
http://secunia.com/advisories/42453
Broken Link
Vendor Advisory
http://secunia.com/advisories/42482
Broken Link
Vendor Advisory
http://www.securityfocus.com/archive/1/514995/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/45167
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1024819
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1024820
Broken Link
Third Party Advisory
VDB Entry
http://www.vmware.com/security/advisories/VMSA-2010-0018.html
Vendor Advisory
http://www.vupen.com/english/advisories/2010/3116
Broken Link
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:vmware:workstation:7.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation:7.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation:7.1.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation:7.1.2:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:a:vmware:player:3.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:player:3.1.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:player:3.1.2:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:a:vmware:server:2.0.2:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

Одно из

cpe:2.3:a:vmware:fusion:3.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:3.1.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:3.1.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*

EPSS

Процентиль: 17%

0.00055

Низкий

6.9 Medium

CVSS2

Дефекты

CWE-362

Связанные уязвимости

GHSA-fmhg-h6vw-qwgj

github

больше 3 лет назад

EPSS

Процентиль: 17%

0.00055

Низкий

6.9 Medium

CVSS2

Дефекты

CWE-362