Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-1363
HistoryMar 20, 2008 - 12:44 a.m.

CVE-2008-1363

2008-03-2000:44:00
CWE-264
[email protected]
web.nvd.nist.gov
1

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.6%

JSON

VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges via an unspecified manipulation of a config.ini file located in an Application Data folder, which can be used for “hijacking the VMX process.”

Affected configurations

NVD
Node
microsoftwindows
AND
vmwareaceRange1.0–1.0.5
OR
vmwareaceRange2.0–2.0.1
OR
vmwareplayerRange1.0.0–1.0.6
OR
vmwareplayerRange2.0–2.0.3
OR
vmwareserverRange1.0–1.0.5
OR
vmwareworkstationRange5.5–5.5.6
OR
vmwareworkstationRange6.0–6.0.3

Related

cvelist 1
cve 1
ubuntucve 1
prion 1
seebug 1
securityvulns 2
vmware 2
nessus 2
openvas 2
gentoo 1
cvelist
cvelist
CVE-2008-1363
2008-03-20 00:00:00
cve
cve
CVE-2008-1363
2008-03-20 00:44:00
ubuntucve
ubuntucve
CVE-2008-1363
2008-03-20 00:00:00
prion
prion
Design/Logic Flaw
2008-03-20 00:44:00
seebug
seebug
VMware Server 1.0.5多个安全漏洞
2008-03-21 00:00:00
securityvulns
securityvulns
VMWare applications multiple security vulnerabilities
2008-03-18 00:00:00
VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues
2008-03-18 00:00:00
vmware
vmware
Several critical security vulnerabilities have been addressed in the newest releases of VMware's hosted product line
2008-03-17 00:00:00
Several critical security vulnerabilities have been addressed in the newest releases of VMware's hosted product line
2008-03-17 00:00:00
nessus
nessus
VMware Products Multiple Vulnerabilities (VMSA-2008-0005)
2008-04-02 00:00:00
GLSA-201209-25 : VMware Player, Server, Workstation: Multiple vulnerabilities
2012-10-01 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201209-25 (vmware-server vmware-player vmware-workstation)
2012-10-03 00:00:00
Gentoo Security Advisory GLSA 201209-25 (vmware-server vmware-player vmware-workstation)
2012-10-03 00:00:00
gentoo
gentoo
VMware Player, Server, Workstation: Multiple vulnerabilities
2012-09-29 00:00:00

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.6%

JSON
Related for NVD:CVE-2008-1363
cvelist1cve1ubuntucve1prion1seebug1securityvulns2vmware2nessus2openvas2gentoo1