Description
mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1, when a Solaris or FreeBSD guest OS is used, allows guest OS users to modify arbitrary guest OS files via unspecified vectors, related to a "procedural error."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | open-vm-tools | 2:8.4.2+2011.08.21-471295-1 | — |
| Debian 13 | open-vm-tools | 2:8.4.2+2011.08.21-471295-1 | — |
| Debian 12 | open-vm-tools | 2:8.4.2+2011.08.21-471295-1 | — |
References
- 44904 third-party-advisory
- 48098 vdb-entry
- http://www.vmware.com/security/advisories/VMSA-2011-0009.html
- vmware-mountvmhgfs-privilege-esc(67815) vdb-entry
- 44840 third-party-advisory
- 1025601 vdb-entry
- openSUSE-SU-2011:0617 vendor-advisory