Lucene search

K
nvd[email protected]NVD:CVE-2011-1787
HistoryJun 06, 2011 - 7:55 p.m.

CVE-2011-1787

2011-06-0619:55:01
CWE-362
web.nvd.nist.gov
8

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

26.7%

Race condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to gain privileges on the guest OS by mounting a filesystem on top of an arbitrary directory.

Affected configurations

Nvd
Node
vmwareworkstationMatch7.1.1
OR
vmwareworkstationMatch7.1.2
OR
vmwareworkstationMatch7.1.3
Node
vmwareplayerMatch3.1
OR
vmwareplayerMatch3.1.1
OR
vmwareplayerMatch3.1.2
OR
vmwareplayerMatch3.1.3
Node
vmwarefusionMatch3.1
OR
vmwarefusionMatch3.1.1
OR
vmwarefusionMatch3.1.2
Node
vmwareesxMatch3.0.3
OR
vmwareesxMatch3.5
OR
vmwareesxMatch4.0
OR
vmwareesxMatch4.1
OR
vmwareesxiMatch3.5
OR
vmwareesxiMatch4.0
OR
vmwareesxiMatch4.1
VendorProductVersionCPE
vmwareworkstation7.1.1cpe:2.3:a:vmware:workstation:7.1.1:*:*:*:*:*:*:*
vmwareworkstation7.1.2cpe:2.3:a:vmware:workstation:7.1.2:*:*:*:*:*:*:*
vmwareworkstation7.1.3cpe:2.3:a:vmware:workstation:7.1.3:*:*:*:*:*:*:*
vmwareplayer3.1cpe:2.3:a:vmware:player:3.1:*:*:*:*:*:*:*
vmwareplayer3.1.1cpe:2.3:a:vmware:player:3.1.1:*:*:*:*:*:*:*
vmwareplayer3.1.2cpe:2.3:a:vmware:player:3.1.2:*:*:*:*:*:*:*
vmwareplayer3.1.3cpe:2.3:a:vmware:player:3.1.3:*:*:*:*:*:*:*
vmwarefusion3.1cpe:2.3:a:vmware:fusion:3.1:*:*:*:*:*:*:*
vmwarefusion3.1.1cpe:2.3:a:vmware:fusion:3.1.1:*:*:*:*:*:*:*
vmwarefusion3.1.2cpe:2.3:a:vmware:fusion:3.1.2:*:*:*:*:*:*:*
Rows per page:
1-10 of 171

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

26.7%