Skip to main content

VMware Workstation and Player vmware-mount Command Vulnerability

Last Update Date: 26 Aug 2013 10:26 Release Date: 26 Aug 2013 3867 Views

RISK: Medium Risk

TYPE: Operating Systems - VM Ware

TYPE: VM Ware

A vulnerability has been identified in VMware Workstation and Player on Debian-based systems. which can be exploited by local user on the host operating system can obtain root privileges on the target system.

On Debian-based host systens, a local user can exploit a flaw in the vmware-mount component to gain root privileges on the host system.


Impact

  • Elevation of Privilege

System / Technologies affected

Debian-based systems

  • VMware Workstation 9.x
  • VMware Workstation 8.x
  • VMware Player 5.x
  • VMware Player 4.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • Apply the fixed version of '/usr/bin/vmware-mount'

Vulnerability Identifier


Source


Related Link