CVE-2011-1681 vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and earlier attempts to append to the /etc/mtab file without first checking whether resource limits would inter...
LowCVSS 3.3
EPSS 0.45%
- Published
- Updated
- Exploit status
- No public exploit known
Description
vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and earlier attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to trigger corruption of this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware open-vm-tools | <= 8.4.2-261024 | No fix listed |
| debian/open-vm-tools(Debian:12) | < 2:8.4.2+2011.08.21-471295-1 | 2:8.4.2+2011.08.21-471295-1 |
| debian/open-vm-tools(Debian:13) | < 2:8.4.2+2011.08.21-471295-1 | 2:8.4.2+2011.08.21-471295-1 |
| debian/open-vm-tools(Debian:14) | < 2:8.4.2+2011.08.21-471295-1 | 2:8.4.2+2011.08.21-471295-1 |
References
- [oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110303 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110303 Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110307 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110315 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE exploit mailing-list
- [oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110401 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- 44904 third-party-advisory
- bugzilla.redhat.com exploit
- vmware-vmwarehgfsmounter-sec-bypass(66699) vdb-entry
- openSUSE-SU-2011:0617 vendor-advisory
- Debian Security Tracker CVE-2011-1681 vendor-advisory
- bugs.debian.org issue-tracking