Unscored severity · published Jan 20, 2009
CVE-2009-0177
vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Player 2.5.1 build 126130, 2.5.1…
–
CVSS
8.6%
EPSS
No
On KEV
Description
vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Player 2.5.1 build 126130, 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 2.0.x before 2.0.1 build 156745; and VMware Fusion before 2.0.2 build 147997 allows remote attackers to cause a denial of service (daemon crash) via a long (1) USER or (2) PASS command.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.6% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Ace · Vmware
through 2.5.1; 2.5.0 · source: NVD
FU
Fusion · Vmware
through 2.0.1 · source: NVD
SE
Server · Vmware
2.0.0 · source: NVD
VP
Vmware Player · Vmware
through 2.5.1; 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +12 more · source: NVD
VW
Vmware Workstation · Vmware
through 6.51; 4.5.3; 5.0; 5.5.0; 5.5.1; 5.5.2; +13 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0177
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0177
Patch
http://lists.vmware.com/pipermail/security-announce/2009/000054.html
osvdb.org
http://osvdb.org/51180
Patch
http://seclists.org/fulldisclosure/2009/Apr/0036.html
Vendor Advisory
http://secunia.com/advisories/33372
Vendor Advisory
http://secunia.com/advisories/34601
Exploit
http://www.securityfocus.com/bid/34373
More from Ace
–
CVE-2009-4811
VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459,…
–
CVE-2010-1142
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x…
–
CVE-2010-1141
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x…
–
CVE-2010-1138
The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1…
–
CVE-2009-3732
Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors