Unscored severity · published Apr 6, 2009
CVE-2009-0908
Unspecified vulnerability in the ACE shared folders implementation in the VMware Host Guest File System (HGFS) shared folders feature in VMware ACE 2.5.1 and earlier allows…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Unspecified vulnerability in the ACE shared folders implementation in the VMware Host Guest File System (HGFS) shared folders feature in VMware ACE 2.5.1 and earlier allows attackers to enable a disabled shared folder.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Ace · Vmware
through 2.5.1; 1.0; 1.0.0; 1.0.1; 1.0.2; 1.0.3; +11 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0908
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0908
Patch
http://lists.vmware.com/pipermail/security-announce/2009/000054.html
Patch
http://seclists.org/fulldisclosure/2009/Apr/0036.html
www.securityfocus.com
http://www.securityfocus.com/bid/34373
www.securitytracker.com
http://www.securitytracker.com/id?1021975
www.vmware.com
http://www.vmware.com/security/advisories/VMSA-2009-0005.html
www.vupen.com
http://www.vupen.com/english/advisories/2009/0944
More from Ace
–
CVE-2009-4811
VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459,…
–
CVE-2010-1142
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x…
–
CVE-2010-1141
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x…
–
CVE-2010-1138
The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1…
–
CVE-2009-3732
Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors