Executive Summary
| Summary | |
|---|---|
| Title | VMware vmrun utility local privilege escalation |
| Informations | |||
|---|---|---|---|
| Name | VMSA-2011-0006 | First vendor Publication | 2011-03-29 |
| Vendor | VMware | Last vendor Modification | 2011-03-29 |
| Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:M/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 6.9 | Attack Range | Local |
| Cvss Impact Score | 10 | Attack Complexity | Medium |
| Cvss Expoit Score | 3.4 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| a. VMware Linux based vmrun utility local privilege escalation VMware vmrun is a utility that is used to perform various tasks on virtual machines. The vmrun utility runs on any platform with VIX libraries installed. It is installed in VMware Workstation by default. In non-standard filesystem configurations, an attacker with the ability to place files into a predefined library path, could take execution control of vmrun. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2011-1126 to this issue. VMware would like to thank Tim Brown for reporting this issue to us. |
Original Source
| Url : http://www.vmware.com/security/advisories/VMSA-2011-0006.html |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-264 | Permissions, Privileges, and Access Controls |
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2011-04-11 | Name : VMware Workstation 'vmrun' Library Path Privilege Escalation Vulnerability (L... File : nvt/gb_vmware_workstation_loc_prev_escl_vuln_lin.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 71783 | VMware Workstation vmrun Unspecified Shared Library Local Privilege Escalation |
Alert History
| Date | Informations |
|---|---|
| 2013-12-14 21:19:32 |
|
