Description
VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users to gain privileges via a Trojan horse shared library in an unspecified directory.
References
- 1025270 vdb-entry
- 43885 third-party-advisory
- ADV-2011-0816 vdb-entry
- vmware-vmrun-privilege-escalation(66472) vdb-entry
- http://www.vmware.com/security/advisories/VMSA-2011-0006.html
- [security-announce] 20110330 UPDATED VMSA-2011-0006.1 VMware vmrun utility local privilege escalation mailing-list
- 20110330 VMSA-2011-0006 VMware vmrun utility local privilege escalation mailing-list
- 43943 third-party-advisory
- 47094 vdb-entry
- 8173 third-party-advisory