Unscored severity · published Dec 21, 2005
CVE-2005-4459
Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote…
–
CVSS
14.2%
EPSS
No
On KEV
Description
Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands.
Exploitation
Is it being used?
Exploit prediction (EPSS)14.2% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Ace · Vmware
1.0.1 · source: NVD
GS
Gsx Server · Vmware
2.0; 2.0.1_build_2129; 2.5.1; 2.5.1_build_5336; 2.5.2; 3.0; +3 more · source: NVD
PL
Player · Vmware
1.0.0 · source: NVD
WO
Workstation · Vmware
3.2.1; 3.4; 4.0; 4.0.1; 4.0.2; 4.5.2; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-4459
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-4459
Exploit
http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.html
Patch
http://secunia.com/advisories/18162
Vendor Advisory
http://secunia.com/advisories/18344
Third Party Advisory
http://securityreason.com/securityalert/282
Third Party Advisory
http://securityreason.com/securityalert/289
Permissions Required
http://securitytracker.com/id?1015401
More from Ace
–
CVE-2009-4811
VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459,…
–
CVE-2010-1142
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x…
–
CVE-2010-1141
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x…
–
CVE-2010-1138
The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1…
–
CVE-2009-3732
Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors