PT-2017-14551

Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion version 5.0.3 Description A local attacker can exploit the issue to escalate to root by creating a fake application directory and exploiting the suid sudo helper, given that...

CVE-2017-16777: Uncontrolled Search Path Element

If HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake application directory and exploit the suid sudo helper in order to escalate to root...

CVE-2017-16001: Concurrent Execution using Shared Resource with Improper Synchronization

In HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.1, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges...

PT-2017-14354

Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant VMware Fusion plugin versions 5.0.1 Description A local attacker or malware can silently subvert the plugin update process to escalate to root privileges. Recommendations For HashiCorp Vagrant VMware Fusion plugin version...

CVE-2017-15884: Concurrent Execution using Shared Resource with Improper Synchronization

In HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.0, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges...

PT-2017-14262

Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant VMware Fusion plugin version 5.0.0 Description A local attacker or malware can silently subvert the plugin update process to escalate to root privileges. Recommendations For HashiCorp Vagrant VMware Fusion plugin version 5.0....

CVE-2017-12579

An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 4.0.24 and earlier allows a non-root user to obtain a root shell...

PT-2017-12584

Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion versions 4.0.24 and earlier Description The issue is related to an insecure suid wrapper binary, which allows a non-root user to obtain a root shell. Recommendations For HashiCor...

CVE-2017-11741: Incorrect Default Permissions

HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts...

PT-2017-12216

Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant VMware Fusion plugin versions prior to 4.0.24 Description The issue allows local users to execute arbitrary code with root privileges by overwriting one of the scripts due to weak permissions for the sudo helper scripts...

PT-2017-17858

Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant VMware Fusion plugin versions prior to 4.0.21 Description The issue allows local users to gain root privileges due to the failure to verify the path to the encoded ruby script or scrub the PATH variable in the sudo helper of...