Unscored severity · published Jun 5, 2008
CVE-2008-0967
Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMware Player 1.x before 1.0.7 build 91707…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMware Player 1.x before 1.0.7 build 91707 and 2.x before 2.0.4 build 93057, and VMware Server before 1.0.6 build 91891 on Linux, and VMware ESXi 3.5 and VMware ESX 2.5.4 through 3.5, allows local users to gain privileges via a library path option in a configuration file.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
ESXi · VMware
3.5 · source: NVD
ES
Esx · Vmware
3.0.0; 3.0.1; 3.0.2 · source: NVD
ES
Esx Server · Vmware
2.5.5; 3.1; 3.2; 3.3; 3.5 · source: NVD
PL
Player · Vmware
1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +5 more · source: NVD
SE
Server · Vmware
1.0.3 · source: NVD
VS
Vmware Server · Vmware
1.0.0; 1.0.1; 1.0.2; 1.0.4; 1.0.5 · source: NVD
VW
Vmware Workstation · Vmware
5.5.0; 5.5.2; 5.5.5; 5.5.6; 6.0.1; 6.0.2; +1 more · source: NVD
WO
Workstation · Vmware
5.5.1; 5.5.3; 5.5.4; 6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0967
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0967
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=713
Vendor Advisory
http://secunia.com/advisories/30556
security.gentoo.org
http://security.gentoo.org/glsa/glsa-201209-25.xml
securityreason.com
http://securityreason.com/securityalert/3922
securitytracker.com
http://securitytracker.com/id?1020198
www.securityfocus.com
http://www.securityfocus.com/archive/1/493080/100/0/threaded
More from ESXi
9.8
CVE-2020-3992
VMware ESXi OpenSLP Use-After-Free Vulnerability
9.8
CVE-2019-5544
VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
8.2
CVE-2025-22225
VMware ESXi Arbitrary Write Vulnerability
8.2
CVE-2025-22224
VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
7.8
CVE-2010-3904
Linux Kernel Improper Input Validation Vulnerability