CVE-2011-1126
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
5.1%
VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users to gain privileges via a Trojan horse shared library in an unspecified directory.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| vmware | vix_api | 1.0 | cpe:2.3:a:vmware:vix_api:1.0:*:*:*:*:*:*:* |
| vmware | vix_api | 1.1 | cpe:2.3:a:vmware:vix_api:1.1:*:*:*:*:*:*:* |
| vmware | vix_api | 1.1.1 | cpe:2.3:a:vmware:vix_api:1.1.1:*:*:*:*:*:*:* |
| vmware | vix_api | 1.1.2 | cpe:2.3:a:vmware:vix_api:1.1.2:*:*:*:*:*:*:* |
| vmware | vix_api | 1.1.3 | cpe:2.3:a:vmware:vix_api:1.1.3:*:*:*:*:*:*:* |
| vmware | vix_api | 1.1.4 | cpe:2.3:a:vmware:vix_api:1.1.4:*:*:*:*:*:*:* |
| vmware | vix_api | 1.1.5 | cpe:2.3:a:vmware:vix_api:1.1.5:*:*:*:*:*:*:* |
| vmware | vix_api | 1.6.0 | cpe:2.3:a:vmware:vix_api:1.6.0:*:*:*:*:*:*:* |
| vmware | vix_api | 1.6.1 | cpe:2.3:a:vmware:vix_api:1.6.1:*:*:*:*:*:*:* |
| vmware | vix_api | 1.7 | cpe:2.3:a:vmware:vix_api:1.7:*:*:*:*:*:*:* |
References
lists.vmware.com/pipermail/security-announce/2011/000131.html
secunia.com/advisories/43885
secunia.com/advisories/43943
securityreason.com/securityalert/8173
securitytracker.com/id?1025270
www.securityfocus.com/archive/1/517240/100/0/threaded
www.securityfocus.com/bid/47094
www.vmware.com/security/advisories/VMSA-2011-0006.html
www.vupen.com/english/advisories/2011/0816
exchange.xforce.ibmcloud.com/vulnerabilities/66472
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
5.1%