vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and earlier attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to trigger corruption of this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

This update of open-vm-tools fixes the following vulnerabilities which allowed an attacker to gain root privileges within the guest system :

  - CVE-2011-1681

  - CVE-2011-2146

  - CVE-2011-1787

  - CVE-2011-2145

ID	Name	Product	Family	Severity
75932	openSUSE Security Update : libvmtools-devel (openSUSE-SU-2011:0617-1)	Nessus	SuSE Local Security Checks	medium
75626	openSUSE Security Update : libvmtools-devel (openSUSE-SU-2011:0617-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2011-1681

high

Tenable Plugins

medium

medium