Command injection

2009-01-2016:00:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.078 Low

EPSS

Percentile

94.3%

JSON

vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Player 2.5.1 build 126130, 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 2.0.x before 2.0.1 build 156745; and VMware Fusion before 2.0.2 build 147997 allows remote attackers to cause a denial of service (daemon crash) via a long (1) USER or (2) PASS command.

CPENameOperatorVersion
acele2.5.1
aceeq2.5.0
fusionle2.0.1
servereq2.0.0
vmware_playereq1.0.3
vmware_playereq1.0.7
vmware_playereq1.0.8
vmware_playereq2.0.3
vmware_playerle2.5.1
vmware_playereq1.0.9

Name	Operator	Version
ace	le	2.5.1
ace	eq	2.5.0
fusion	le	2.0.1
server	eq	2.0.0
vmware_player	eq	1.0.3
vmware_player	eq	1.0.7
vmware_player	eq	1.0.8
vmware_player	eq	2.0.3
vmware_player	le	2.5.1
vmware_player	eq	1.0.9