CVE-2011-2145
MEDIUM severity · CVSS 6.3 · CWE-264
6.3CVSS MEDIUM
Summary
mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1, when a Solaris or FreeBSD guest OS is used, allows guest OS users to modify arbitrary guest OS files via unspecified vectors, related to a "procedural error."
Impact & exploitability
Attack vectorLocal
Attack complexity—
Privileges required—
User interaction—
Confidentiality impactNone
Integrity impact—
Availability impact—
Exploit probability (EPSS)0%
AV:L/AC:M/Au:N/C:N/I:C/A:C
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Official patch: http://www.vmware.com/security/advisories/VMSA-2011-0009.html ↗
Additional information
- NVD record
- http://www.vmware.com/security/advisories/VMSA-2011-0009.htmlPatch
- http://secunia.com/advisories/44840
- http://secunia.com/advisories/44904
- http://www.securityfocus.com/bid/48098
- http://www.securitytracker.com/id?1025601
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67815
- https://hermes.opensuse.org/messages/8711677