CVE-2009-2968

CVE-2009-2968 describes a directory traversal in VMware Studio 2.0 public beta (before build 1017-185256) affecting a web interface support component. Due to insufficient input sanitization, an attacker could trick the component into uploading files to arbitrary directories inside the Studio virt...

CVE-2010-2667

Summary (CVE-2010-2667) : VMware Studio 2.0 and virtual appliances created with Studio 2.0 are affected by a vulnerability in Virtual Appliance Management Infrastructure (VAMI) that allows remote authenticated users to execute arbitrary commands. The issue requires authentication and affects Stud...

CVE-2010-2427

CVE-2010-2427 describes a local privilege-escalation in VMware Studio 2.0 caused by improper handling of temporary files. VMware’s advisories (VMSA-2010-0011) confirm that Studio 2.0 may be affected and that 2.1 addresses security issues in virtual appliances created with Studio 2.0. The vulnerab...