Hashicorp vagrant-vmware-fusion elevation of privilege vulnerability

Hashicorp vagrant-vmware-fusion is a tool for building and managing virtual machine environments on VMware virtual machines developed by HashiCorp, USA. A security vulnerability exists in Hashicorp vagrant-vmware-fusion versions 4.0.25 through 5.0.4. An attacker can exploit the vulnerability to...

CVE-2017-16839

Hashicorp vagrant-vmware-fusion 5.0.4 allows local users to steal root privileges if VMware Fusion is not installed...

PT-2018-6345

Name of the Vulnerable Software and Affected Versions: Hashicorp vagrant-vmware-fusion version 5.0.4 Description: The issue allows local users to gain root privileges under certain conditions, specifically when VMware Fusion is not installed. Recommendations: For Hashicorp vagrant-vmware-fusion...

Hashicorp vagrant-vmware-fusion 5.0.0 Local Privilege Escalation

After three CVEs and multiple exploits disclosed to Hashicorp they have finally upped their game with this plugin. Now the previously vulnerable non-root-owned ruby code that get executed as root by the sudo helper is no more and the sudo helper itself is one static Go binary with...

Hashicorp vagrant-vmware-fusion 5.0.0 - Local Privilege Escalation

Hashicorp vagrant-vmware-fusion 5.0.0 - Local Privilege Escalation After three CVEs and multiple exploits disclosed to Hashicorp they have finally upped their game with this plugin. Now the previously vulnerable non-root-owned ruby code that get executed as root by the sudo helper is no more and...

Hashicorp vagrant-vmware-fusion 5.0.1 - Local Privilege Escalation

Hashicorp vagrant-vmware-fusion 5.0.1 - Local Privilege Escalation I recently blogged about how the installation process of version 5.0.0 of this plugin could be hihacked by a local attacker or malware in order to escalate privileges to root. Hashicorp pushed some mitigations for this issue fairl...

CVE-2017-16777

If HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake application directory and exploit the suid sudo helper in order to escalate to root...

PT-2017-14551

Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion version 5.0.3 Description A local attacker can exploit the issue to escalate to root by creating a fake application directory and exploiting the suid sudo helper, given that...

CVE-2017-16777: Uncontrolled Search Path Element

If HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake application directory and exploit the suid sudo helper in order to escalate to root...

CVE-2017-16001: Concurrent Execution using Shared Resource with Improper Synchronization

In HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.1, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges...

PT-2017-14354

Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant VMware Fusion plugin versions 5.0.1 Description A local attacker or malware can silently subvert the plugin update process to escalate to root privileges. Recommendations For HashiCorp Vagrant VMware Fusion plugin version...

PT-2017-14262

Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant VMware Fusion plugin version 5.0.0 Description A local attacker or malware can silently subvert the plugin update process to escalate to root privileges. Recommendations For HashiCorp Vagrant VMware Fusion plugin version 5.0....

CVE-2017-15884: Concurrent Execution using Shared Resource with Improper Synchronization

In HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.0, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges...

CVE-2017-12579

An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 4.0.24 and earlier allows a non-root user to obtain a root shell...

PT-2017-12584

Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion versions 4.0.24 and earlier Description The issue is related to an insecure suid wrapper binary, which allows a non-root user to obtain a root shell. Recommendations For HashiCor...

CVE-2017-11741

HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts...

CVE-2017-11741: Incorrect Default Permissions

HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts...

CVE-2017-7642

The sudo helper in the HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.21 allows local users to gain root privileges by leveraging failure to verify the path to the encoded ruby script or scrub the PATH variable...

PT-2017-17858

Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant VMware Fusion plugin versions prior to 4.0.21 Description The issue allows local users to gain root privileges due to the failure to verify the path to the encoded ruby script or scrub the PATH variable in the sudo helper of...