Описание
VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users to gain privileges via a Trojan horse shared library in an unspecified directory.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
Одно из
cpe:2.3:a:vmware:vix_api:1.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:vix_api:1.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:vix_api:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:vix_api:1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:vmware:vix_api:1.1.3:*:*:*:*:*:*:*
cpe:2.3:a:vmware:vix_api:1.1.4:*:*:*:*:*:*:*
cpe:2.3:a:vmware:vix_api:1.1.5:*:*:*:*:*:*:*
cpe:2.3:a:vmware:vix_api:1.6.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:vix_api:1.6.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:vix_api:1.7:*:*:*:*:*:*:*
cpe:2.3:a:vmware:vix_api:1.8:*:*:*:*:*:*:*
cpe:2.3:a:vmware:vix_api:1.8.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:vix_api:1.9:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Конфигурация 2
Одновременно
Одно из
cpe:2.3:a:vmware:workstation:6.5.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:6.5.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:6.5.2:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:6.5.3:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:6.5.4:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:6.5.5:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:7.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:7.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:7.1.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:7.1.2:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:7.1.3:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
EPSS
Процентиль: 22%
0.00069
Низкий
6.9 Medium
CVSS2
Дефекты
CWE-264
Связанные уязвимости
github
около 3 лет назад
VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users to gain privileges via a Trojan horse shared library in an unspecified directory.
fstec
около 14 лет назад
Уязвимость гипервизора VMware Workstation, позволяющая злоумышленнику получить контроль над выполнением утилиты «vmrun»
EPSS
Процентиль: 22%
0.00069
Низкий
6.9 Medium
CVSS2
Дефекты
CWE-264