CVE-2011-1126 VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users to gain privileges via a Trojan horse shared library...
MediumCVSS 6.9
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users to gain privileges via a Trojan horse shared library in an unspecified directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware vix api | = 1.0 | No fix listed |
| VMware vix api | = 1.1 | No fix listed |
| VMware vix api | = 1.1.1 | No fix listed |
| VMware vix api | = 1.1.2 | No fix listed |
| VMware vix api | = 1.1.3 | No fix listed |
| VMware vix api | = 1.1.4 | No fix listed |
| VMware vix api | = 1.1.5 | No fix listed |
| VMware vix api | = 1.6.0 | No fix listed |
| VMware vix api | = 1.6.1 | No fix listed |
| VMware vix api | = 1.7 | No fix listed |
| VMware vix api | = 1.8 | No fix listed |
| VMware vix api | = 1.8.1 | No fix listed |
| VMware vix api | = 1.9 | No fix listed |
| VMware Workstation | = 6.5.0 | No fix listed |
| VMware Workstation | = 6.5.1 | No fix listed |
| VMware Workstation | = 6.5.2 | No fix listed |
| VMware Workstation | = 6.5.3 | No fix listed |
| VMware Workstation | = 6.5.4 | No fix listed |
| VMware Workstation | = 6.5.5 | No fix listed |
| VMware Workstation | = 7.0 | No fix listed |
| VMware Workstation | = 7.0.1 | No fix listed |
| VMware Workstation | = 7.1 | No fix listed |
| VMware Workstation | = 7.1.1 | No fix listed |
| VMware Workstation | = 7.1.2 | No fix listed |
| VMware Workstation | = 7.1.3 | No fix listed |
References
- [security-announce] 20110330 UPDATED VMSA-2011-0006.1 VMware vmrun utility local privilege escalation mailing-list vendor-advisory
- 43885 third-party-advisory vendor-advisory
- 43943 third-party-advisory vendor-advisory
- 8173 third-party-advisory
- 1025270 vdb-entry
- 20110330 VMSA-2011-0006 VMware vmrun utility local privilege escalation mailing-list
- 47094 vdb-entry
- www.vmware.com vendor-advisory
- ADV-2011-0816 vdb-entry vendor-advisory
- vmware-vmrun-privilege-escalation(66472) vdb-entry