Unscored severity · published Feb 26, 2008
CVE-2008-0923
Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1.0.2 and 2.0.2, Player 1.0.4 and 2.0.2, and Workstation 5.5.4 and 6.0.2 allows guest OS users to…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1.0.2 and 2.0.2, Player 1.0.4 and 2.0.2, and Workstation 5.5.4 and 6.0.2 allows guest OS users to read and write arbitrary files on the host OS via a multibyte string that produces a wide character string containing .. (dot dot) sequences, which bypasses the protection mechanism, as demonstrated using a "%c0%2e%c0%2e" string.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 42% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Ace · Vmware
1.0; 1.0.2; 2.0; 2.0.1; 2.0.2 · source: NVD
PL
Player · Vmware
1.0.4 · source: NVD
VP
Vmware Player · Vmware
1.0.1_build_19317; 1.0.2; 1.0.3 · source: NVD
VW
Vmware Workstation · Vmware
6.0.1; 6.0.2 · source: NVD
WO
Workstation · Vmware
4.5.2; 5.5.3_build_34685; 5.5.4; 6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0923
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0923
kb.vmware.com
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1004034
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060457.html
lists.vmware.com
http://lists.vmware.com/pipermail/security-announce/2008/000008.html
secunia.com
http://secunia.com/advisories/29117
securityreason.com
http://securityreason.com/securityalert/3700
www.coresecurity.com
http://www.coresecurity.com/?action=item&id=2129
More from Ace
–
CVE-2009-4811
VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459,…
–
CVE-2010-1142
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x…
–
CVE-2010-1141
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x…
–
CVE-2010-1138
The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1…
–
CVE-2009-3732
Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors