Back to feed
EUVD-2008-1399 · Published Mar 20, 2008
The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS accessible through anonymous VIX API calls, which has unknown impact and attack vectors.
Technologies
Vmware Vmware WorkstationVmware AceMicrosoft WindowsVmware Player
Weaknesses
CWE-16
CVSS scores
- v2.010.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://lists.vmware.com/pipermail/security-announce/2008/000008.html
- http://security.gentoo.org/glsa/glsa-201209-25.xml
- http://securityreason.com/securityalert/3755
- http://www.securityfocus.com/archive/1/489739/100/0/threaded
- http://www.securityfocus.com/bid/28276
- http://www.vmware.com/security/advisories/VMSA-2008-0005.html
Potentially impacted assets
See if this affects your attack surface
