CVE-2005-4459 Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, includi...
HighCVSS 10.0
EPSS 14.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware ace | = 1.0.1 | No fix listed |
| VMware gsx server | = 2.0 | No fix listed |
| VMware gsx server | = 2.0.1_build_2129 | No fix listed |
| VMware gsx server | = 2.5.1 | No fix listed |
| VMware gsx server | = 2.5.1_build_5336 | No fix listed |
| VMware gsx server | = 2.5.2 | No fix listed |
| VMware gsx server | = 3.0 | No fix listed |
| VMware gsx server | = 3.0_build_7592 | No fix listed |
| VMware gsx server | = 3.1 | No fix listed |
| VMware gsx server | = 3.2 | No fix listed |
| VMware player | = 1.0.0 | No fix listed |
| VMware Workstation | = 3.2.1-patch1 | No fix listed |
| VMware Workstation | = 3.4 | No fix listed |
| VMware Workstation | = 4.0 | No fix listed |
| VMware Workstation | = 4.0.1 | No fix listed |
| VMware Workstation | = 4.0.2 | No fix listed |
| VMware Workstation | = 4.5.2 | No fix listed |
| VMware Workstation | = 4.5.2_build_8848-r4 | No fix listed |
| VMware Workstation | = 5.0.0_build_13124 | No fix listed |
| VMware Workstation | = 5.5 | No fix listed |
References
- 20051221 [ACSSEC-2005-11-25-0x1] VMWare Workstation 5.5.0 <= build-18007 G SX Server Variants And Others exploit mailing-list
- 18162 patch third-party-advisory vendor-advisory
- 18344 third-party-advisory vendor-advisory
- 282 third-party-advisory
- 289 third-party-advisory
- 1015401 permissions-required vdb-entry
- GLSA-200601-04 third-party-advisory vendor-advisory
- VU#856689 third-party-advisory us-government-resource
- 20051221 [Security-Advisories (at) acs-inc (dot) com [email concealed]: [Full-disclosure] [ACSSEC-2005-11-25-0x1] VMWare Workstation 5.5.0 <= build-18007 G SX Server Variants And Others] broken-link mailing-list
- 20051221 VMware vulnerability in NAT networking broken-link mailing-list
- 15998 broken-link patch vdb-entry
- www.vmware.com broken-link patch
- ADV-2005-3013 url-repurposed vdb-entry