Description
Race condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to gain privileges on the guest OS by mounting a filesystem on top of an arbitrary directory.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | open-vm-tools | 2:8.4.2+2011.08.21-471295-1 | — |
| Debian 13 | open-vm-tools | 2:8.4.2+2011.08.21-471295-1 | — |
| Debian 12 | open-vm-tools | 2:8.4.2+2011.08.21-471295-1 | — |
References
- 44904 third-party-advisory
- 48098 vdb-entry
- http://www.vmware.com/security/advisories/VMSA-2011-0009.html
- 44840 third-party-advisory
- 1025601 vdb-entry
- openSUSE-SU-2011:0617 vendor-advisory