4 matches found
Design/Logic Flaw
If HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake application directory and exploit the suid sudo helper in order to escalate to root...
CVE-2017-16777
If HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake application directory and exploit the suid sudo helper in order to escalate to root...
CVE-2017-16777
The CVE-2017-16777 issue affects the HashiCorp Vagrant VMware Fusion plugin (vagrant-vmware-fusion) version 5.0.3. The vulnerability arises when VMware Fusion is not installed but the plugin is present; a local attacker can create a fake application directory and abuse the plugin’s suid root sudo...
CVE-2017-16777
If HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake application directory and exploit the suid sudo helper in order to escalate to root...