CVE-2008-0923
N/A
N/A
Summary
Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1.0.2 and 2.0.2, Player 1.0.4 and 2.0.2, and Workstation 5.5.4 and 6.0.2 allows guest OS users to read and write arbitrary files on the host OS via a multibyte string that produces a wide character string containing .. (dot dot) sequences, which bypasses the protection mechanism, as demonstrated using a "%c0%2e%c0%2e" string.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.securityfocus.com/bid/27944
- http://secunia.com/advisories/29117
- http://www.coresecurity.com/?action=item&id=2129
- http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html
- http://www.securityfocus.com/archive/1/488725/100/0/threaded
- http://www.vmware.com/support/player2/doc/releasenotes_player2.html
- http://www.vmware.com/support/player/doc/releasenotes_player.html
- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html
- http://www.securitytracker.com/id?1019493
- http://www.securityfocus.com/archive/1/489739/100/0/threaded
- http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1004034
- http://lists.vmware.com/pipermail/security-announce/2008/000008.html
- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
- http://www.vupen.com/english/advisories/2008/0905/references
- http://www.vmware.com/security/advisories/VMSA-2008-0005.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40837
- http://www.vupen.com/english/advisories/2008/0679
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060457.html
- http://www.securityfocus.com/bid/28276
- http://securityreason.com/securityalert/3700
References
- http://www.securityfocus.com/bid/27944
- http://secunia.com/advisories/29117
- http://www.coresecurity.com/?action=item&id=2129
- http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html
- http://www.securityfocus.com/archive/1/488725/100/0/threaded
- http://www.vmware.com/support/player2/doc/releasenotes_player2.html
- http://www.vmware.com/support/player/doc/releasenotes_player.html
- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html
- http://www.securitytracker.com/id?1019493
- http://www.securityfocus.com/archive/1/489739/100/0/threaded
- http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1004034
- http://lists.vmware.com/pipermail/security-announce/2008/000008.html
- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
- http://www.vupen.com/english/advisories/2008/0905/references
- http://www.vmware.com/security/advisories/VMSA-2008-0005.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40837
- http://www.vupen.com/english/advisories/2008/0679
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060457.html
- http://www.securityfocus.com/bid/28276
- http://securityreason.com/securityalert/3700
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.