6.9

CVE-2008-0967

Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMware Player 1.x before 1.0.7 build 91707 and 2.x before 2.0.4 build 93057, and VMware Server before 1.0.6 build 91891 on Linux, and VMware ESXi 3.5 and VMware ESX 2.5.4 through 3.5, allows local users to gain privileges via a library path option in a configuration file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Esx Server Version 2.5.5
VMware ≫ Esx Server Version 3.1
VMware ≫ Esx Server Version 3.2
VMware ≫ Esx Server Version 3.3
VMware ≫ Esx Server Version 3.5
VMware ≫ Esxi Version 3.5
VMware ≫ Player Version 1.0.0
VMware ≫ Player Version 1.0.1
VMware ≫ Player Version 1.0.2
VMware ≫ Player Version 1.0.3
VMware ≫ Player Version 1.0.4
VMware ≫ Player Version 1.0.5
VMware ≫ Player Version 1.0.6
VMware ≫ Player Version 2.0
VMware ≫ Player Version 2.0.1
VMware ≫ Player Version 2.0.2
VMware ≫ Player Version 2.0.3
VMware ≫ Server Version 1.0.3
VMware ≫ Vmware Server Version 1.0.0
VMware ≫ Vmware Server Version 1.0.1
VMware ≫ Vmware Server Version 1.0.2
VMware ≫ Vmware Server Version 1.0.4
VMware ≫ Vmware Server Version 1.0.5
VMware ≫ Vmware Workstation Version 5.5.0
VMware ≫ Vmware Workstation Version 5.5.2
VMware ≫ Vmware Workstation Version 5.5.5
VMware ≫ Vmware Workstation Version 5.5.6
VMware ≫ Vmware Workstation Version 6.0.1
VMware ≫ Vmware Workstation Version 6.0.2
VMware ≫ Vmware Workstation Version 6.0.3
VMware ≫ Workstation Version 5.5.1
VMware ≫ Workstation Version 5.5.3
VMware ≫ Workstation Version 5.5.4
VMware ≫ Workstation Version 6.0
VMware ≫ Esx Version 3.0.0
VMware ≫ Esx Version 3.0.1
VMware ≫ Esx Version 3.0.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.36% 0.273
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/archive/1/493080/100/0/threaded
http://www.vmware.com/security/advisories/VMSA-2008-0009.html
Vendor Advisory
http://www.vupen.com/english/advisories/2008/1744
Vendor Advisory
http://security.gentoo.org/glsa/glsa-201209-25.xml
http://secunia.com/advisories/30556
Vendor Advisory
http://securityreason.com/securityalert/3922
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=713
http://securitytracker.com/id?1020198
http://www.securityfocus.com/bid/29557
https://exchange.xforce.ibmcloud.com/vulnerabilities/42878
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4768
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5583