Description
An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory function is enabled.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | open-vm-tools | 2:8.4.2+2011.08.21-471295-1 | — |
| Debian 13 | open-vm-tools | 2:8.4.2+2011.08.21-471295-1 | — |
| Debian 12 | open-vm-tools | 2:8.4.2+2011.08.21-471295-1 | — |