Lucene search

K
cve[email protected]CVE-2008-1362
HistoryMar 20, 2008 - 12:44 a.m.

CVE-2008-1362

2008-03-2000:44:00
CWE-264
web.nvd.nist.gov
26
vmware
privilege escalation
denial of service
cve-2008-1362
nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%

VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges or cause a denial of service by impersonating the authd process through an unspecified use of an “insecurely created named pipe,” a different vulnerability than CVE-2008-1361.

Affected configurations

NVD
Node
vmwareaceMatch1.0
OR
vmwareaceMatch2.0
OR
vmwareplayerMatch1.0.2
OR
vmwareplayerMatch1.0.3
OR
vmwareplayerMatch1.0.4
OR
vmwareplayerMatch1.0.5
OR
vmwareplayerMatch2.0
OR
vmwareplayerMatch2.0.1
OR
vmwareplayerMatch2.0.2
OR
vmwareserverMatch1.0.3
OR
vmwarevmware_serverMatch1.0.2
OR
vmwarevmware_serverMatch1.0.4
OR
vmwarevmware_workstationMatch5.5.5
OR
vmwarevmware_workstationMatch6.0.1
OR
vmwarevmware_workstationMatch6.0.2
OR
vmwareworkstationMatch5.5
OR
vmwareworkstationMatch5.5.3_build_34685
OR
vmwareworkstationMatch5.5.3_build_42958
OR
vmwareworkstationMatch5.5.4
OR
vmwareworkstationMatch5.5.4_build_44386
OR
vmwareworkstationMatch6.0

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%