Page 10 of 98 results (0.026 seconds)

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

14 Feb 2005 — VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writable temporary directory, which allows local users to execute arbitrary code. • http://security.gentoo.org/glsa/glsa-200502-18.xml •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1

31 Dec 2004 — Format string vulnerability in VMware Workstation 4.5.2 build-8848, if running with elevated privileges, might allow local users to execute arbitrary code via format string specifiers in command line arguments. NOTE: it is not clear if there are any default or typical circumstances under which VMware would be running with privileges beyond those already available to the attackers, so this might not be a vulnerability. • http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1320.html •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

04 Sep 2003 — VMware Workstation 4.0.1 for Linux, build 5289 and earlier, allows local users to delete arbitrary files via a symlink attack. • http://marc.info/?l=bugtraq&m=106029217115023&w=2 •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

02 Aug 2003 — VMware GSX Server 2.5.1 build 4968 and earlier, and Workstation 4.0 and earlier, allows local users to gain root privileges via certain enivronment variables that are used when launching a virtual machine session. VMware GSX Server 2.5.1 compilación 4968 y anteriores, y Workstation 4.0 y anteriores, permite a usuarios locales ganar privilegios de root mediante ciertas variables de entorno que son usadas cuando se lanza una sesión de máquina virtual. • http://marc.info/?l=bugtraq&m=105899875225268&w=2 •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

28 Jun 2003 — VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via "symlink manipulation." VMware Workstation 4.0 para Linux permite a usuarios locales sobreescribir ficheros arbitrarios y ganar privilegios mediante una manipulación de enlaces simbólicos. • http://marc.info/?l=bugtraq&m=105673688529147&w=2 •

CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0

30 Jul 2001 — VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license information. • http://www.osvdb.org/5475 •

CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 0

17 Jan 2000 — VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack. • http://www.osvdb.org/1205 •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1

26 Jun 1999 — Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable. • https://www.exploit-db.com/exploits/19371 •