Description
VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license information.
References
- 3119 vdb-entry
- vmware-obtain-license-info(6925) vdb-entry
- 5475 vdb-entry
- 20010730 vmware bug? mailing-list