CVE-2010-4295 Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linu...
MediumCVSS 6.9
EPSS 0.29%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via vectors involving temporary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Workstation | = 7.0 | No fix listed |
| VMware Workstation | = 7.0.1 | No fix listed |
| VMware Workstation | = 7.1 | No fix listed |
| VMware Workstation | = 7.1.1 | No fix listed |
| VMware Workstation | = 7.1.2 | No fix listed |
| VMware player | = 3.1 | No fix listed |
| VMware player | = 3.1.1 | No fix listed |
| VMware player | = 3.1.2 | No fix listed |
| VMware server | = 2.0.2 | No fix listed |
| VMware Fusion | = 3.1 | No fix listed |
| VMware Fusion | = 3.1.1 | No fix listed |
| VMware Fusion | = 3.1.2 | No fix listed |
References
- [security-announce] 20101202 VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues mailing-list vendor-advisory
- 69585 broken-link vdb-entry
- 42453 broken-link third-party-advisory vendor-advisory
- 42482 broken-link third-party-advisory vendor-advisory
- 20101203 VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues broken-link mailing-list third-party-advisory vdb-entry
- 45167 broken-link third-party-advisory vdb-entry
- 1024819 broken-link third-party-advisory vdb-entry
- 1024820 broken-link third-party-advisory vdb-entry
- www.vmware.com vendor-advisory
- ADV-2010-3116 broken-link vdb-entry vendor-advisory