GLSA-200711-23 : VMware Workstation and Player: Multiple vulnerabilities

This script is Copyright (C) 2007-2014 Tenable Network Security, Inc.


Synopsis :

The remote Gentoo host is missing one or more security-related
patches.

Description :

The remote host is affected by the vulnerability described in GLSA-200711-23
(VMware Workstation and Player: Multiple vulnerabilities)

Multiple vulnerabilities have been discovered in several VMware
products. Neel Mehta and Ryan Smith (IBM ISS X-Force) discovered that
the DHCP server contains an integer overflow vulnerability
(CVE-2007-0062), an integer underflow vulnerability (CVE-2007-0063) and
another error when handling malformed packets (CVE-2007-0061), leading
to stack-based buffer overflows or stack corruption. Rafal Wojtczvk
(McAfee) discovered two unspecified errors that allow authenticated
users with administrative or login privileges on a guest operating
system to corrupt memory or cause a Denial of Service (CVE-2007-4496,
CVE-2007-4497). Another unspecified vulnerability related to untrusted
virtual machine images was discovered (CVE-2007-5617).
VMware products also shipped code copies of software with several
vulnerabilities: Samba (GLSA-200705-15), BIND (GLSA-200702-06), MIT
Kerberos 5 (GLSA-200707-11), Vixie Cron (GLSA-200704-11), shadow
(GLSA-200606-02), OpenLDAP (CVE-2006-4600), PAM (CVE-2004-0813,
CVE-2007-1716), GCC (CVE-2006-3619) and GDB (CVE-2006-4146).

Impact :

Remote attackers within a guest system could possibly exploit these
vulnerabilities to execute code on the host system with elevated
privileges or to cause a Denial of Service.

Workaround :

There is no known workaround at this time.

See also :

http://www.gentoo.org/security/en/glsa/glsa-200606-02.xml
http://www.gentoo.org/security/en/glsa/glsa-200702-06.xml
http://www.gentoo.org/security/en/glsa/glsa-200704-11.xml
http://www.gentoo.org/security/en/glsa/glsa-200705-15.xml
http://www.gentoo.org/security/en/glsa/glsa-200707-11.xml
http://lists.vmware.com/pipermail/security-announce/2007/000001.html
http://www.gentoo.org/security/en/glsa/glsa-200711-23.xml

Solution :

All VMware Workstation users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=app-emulation/vmware-workstation-5.5.5.56455'
All VMware Player users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=app-emulation/vmware-player-1.0.5.56455'

Risk factor :

Critical / CVSS Base Score : 10.0
(CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
Public Exploit Available : true

Family: Gentoo Local Security Checks

Nessus Plugin ID: 28262 (gentoo_GLSA-200711-23.nasl)

Bugtraq ID:

CVE ID: CVE-2004-0813
CVE-2006-3619
CVE-2006-4146
CVE-2006-4600
CVE-2007-0061
CVE-2007-0062
CVE-2007-0063
CVE-2007-1716
CVE-2007-4496
CVE-2007-4497
CVE-2007-5617