CVE-2011-1681: vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and earlier attempts to append to the /etc/mtab file without first checking whether… | LiveThreat CVE Feed — Verisq

Login Request a demo

Unscored severity · published Apr 10, 2011

CVE-2011-1681

vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and earlier attempts to append to the /etc/mtab file without first checking whether…

–

CVSS

0.4%

EPSS

No

On KEV

Description

vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and earlier attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to trigger corruption of this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.4% · higher than 39% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

OP

Open-vm-tools · Vmware

through 8.4.2-261024 · source: NVD

Affected product

OP

Open-vm-tools

Vmware

All Open-vm-tools CVEs

References

https://nvd.nist.gov/vuln/detail/CVE-2011-1681

https://www.cve.org/CVERecord?id=CVE-2011-1681

http://openwall.com/lists/oss-security/2011/03/04/10

http://openwall.com/lists/oss-security/2011/03/04/11

http://openwall.com/lists/oss-security/2011/03/04/12

http://openwall.com/lists/oss-security/2011/03/04/9

http://openwall.com/lists/oss-security/2011/03/05/3

http://openwall.com/lists/oss-security/2011/03/05/7

More from Open-vm-tools

7.8

VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

7.5

VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges…

7.5

A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html…

7.0

open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput…

7.0

An issue was discovered in open-vm-tools 2009.03.18-154848