VMware Products Multiple Vulnerabilities (VMSA-2008-0005)

High Nessus Plugin ID 31729


The remote Windows host has an application that is affected by multiple issues.


VMware products installed on the remote host are affected by multiple vulnerabilities :

- The 'authd' process is affected by a privilege escalation vulnerability that could allow an attacker to execute arbitrary code with system level privileges or cause a denial of service condition.

- A feature in VMware workstation version 6.0.2 could allow anonymous console access to guest host via VIX API, which could result in unauthorized access. This feature has been disabled in version 6.0.3.

- Windows based VMware hosts are affected by a privilege escalation vulnerability. By manipulating 'config.ini' an attacker may be able to gain elevated privileges by hijacking the VMware VMX process.

- Multiple VMware products are affected by a directory traversal vulnerability. If a Windows based VMware host is configured to allow shared access from a guest host to a folder on the Host system (HGFS), it may be possible to gain access to the Host file system from guest OS and create/modify arbitrary executable files. VMware Server is not affected by this vulnerability.

- Multiple VMware products hosted on a Windows 2000 host are affected by a privilege escalation vulnerability.

- Multiple VMware products are vulnerable to a potential denial of service attack.


Upgrade to :

- VMware Workstation 6.0.3/5.5.6 or higher.
- VMware Server 1.0.5 or higher.
- VMware Player 2.0.3/1.0.6 or higher.
- VMware ACE 2.0.3/1.0.5 or higher.

See Also








Plugin Details

Severity: High

ID: 31729

File Name: vmware_multiple_vmsa_2008_0005.nasl

Version: $Revision: 1.21 $

Type: local

Agent: windows

Family: Windows

Published: 2008/04/02

Modified: 2017/02/17

Dependencies: 31727, 26200, 31728, 26201

Risk Information

Risk Factor: High


Base Score: 7.2

Temporal Score: 6.5

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:POC/RL:ND/RC:C

Vulnerability Information

CPE: cpe:/a:vmware:ace, cpe:/a:vmware:player, cpe:/a:vmware:vmware_server, cpe:/a:vmware:vmware_workstation

Exploit Available: true

Exploit Ease: Exploits are available

Exploitable With

Core Impact

Reference Information

CVE: CVE-2006-2937, CVE-2006-2940, CVE-2006-4339, CVE-2006-4343, CVE-2007-5269, CVE-2007-5618, CVE-2008-0923, CVE-2008-1340, CVE-2008-1361, CVE-2008-1362, CVE-2008-1363, CVE-2008-1364, CVE-2008-1392

BID: 28276, 28289

OSVDB: 28549, 29260, 29261, 29263, 38274, 40091, 42333, 43896, 43897, 43898, 43899, 43900, 43901

VMSA: 2008-0005

CWE: 16, 20, 22, 264, 310, 399