6.9

CVE-2008-0967

Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMware Player 1.x before 1.0.7 build 91707 and 2.x before 2.0.4 build 93057, and VMware Server before 1.0.6 build 91891 on Linux, and VMware ESXi 3.5 and VMware ESX 2.5.4 through 3.5, allows local users to gain privileges via a library path option in a configuration file.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Esx Server Version2.5.5
VMware ≫ Esx Server Version3.1
VMware ≫ Esx Server Version3.2
VMware ≫ Esx Server Version3.3
VMware ≫ Esx Server Version3.5
VMware ≫ Esxi Version3.5
VMware ≫ Player Version1.0.0
VMware ≫ Player Version1.0.1
VMware ≫ Player Version1.0.2
VMware ≫ Player Version1.0.3
VMware ≫ Player Version1.0.4
VMware ≫ Player Version1.0.5
VMware ≫ Player Version1.0.6
VMware ≫ Player Version2.0
VMware ≫ Player Version2.0.1
VMware ≫ Player Version2.0.2
VMware ≫ Player Version2.0.3
VMware ≫ Server Version1.0.3
VMware ≫ Vmware Server Version1.0.0
VMware ≫ Vmware Server Version1.0.1
VMware ≫ Vmware Server Version1.0.2
VMware ≫ Vmware Server Version1.0.4
VMware ≫ Vmware Server Version1.0.5
VMware ≫ Vmware Workstation Version5.5.0
VMware ≫ Vmware Workstation Version5.5.2
VMware ≫ Vmware Workstation Version5.5.5
VMware ≫ Vmware Workstation Version5.5.6
VMware ≫ Vmware Workstation Version6.0.1
VMware ≫ Vmware Workstation Version6.0.2
VMware ≫ Vmware Workstation Version6.0.3
VMware ≫ Workstation Version5.5.1
VMware ≫ Workstation Version5.5.3
VMware ≫ Workstation Version5.5.4
VMware ≫ Workstation Version6.0
VMware ≫ Esx Version3.0.0
VMware ≫ Esx Version3.0.1
VMware ≫ Esx Version3.0.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.07% 0.226
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C