QwikSec

Security Database

CVE

CWE

Training

CVE-2008-0923

Published: Feb 26, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1.0.2 and 2.0.2, Player 1.0.4 and 2.0.2, and Workstation 5.5.4 and 6.0.2 allows guest OS users to read and write arbitrary files on the host OS via a multibyte string that produces a wide character string containing .. (dot dot) sequences, which bypasses the protection mechanism, as demonstrated using a "%c0%2e%c0%2e" string.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_BID

third-party-advisory

x_refsource_SECUNIA

http://www.coresecurity.com/?action=item&id=2129

x_refsource_MISC

http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html

x_refsource_CONFIRM

20080225 CORE-2007-0930 Path Traversal vulnerability in VMware's shared folders implementation

mailing-list

x_refsource_BUGTRAQ

http://www.vmware.com/support/player2/doc/releasenotes_player2.html

x_refsource_CONFIRM

http://www.vmware.com/support/player/doc/releasenotes_player.html

x_refsource_CONFIRM

http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

x_refsource_CONFIRM

vdb-entry

x_refsource_SECTRACK

20080318 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues

mailing-list

x_refsource_BUGTRAQ

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1004034

x_refsource_CONFIRM

[security-announce] 20080317 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues

mailing-list

x_refsource_MLIST

http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html

x_refsource_CONFIRM

vdb-entry

x_refsource_VUPEN

http://www.vmware.com/security/advisories/VMSA-2008-0005.html

x_refsource_CONFIRM

vmware-sharedfolders-directory-traversal(40837)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_VUPEN

20080225 CORE-2007-0930 Path Traversal vulnerability in VMware's shared folders implementation

mailing-list

x_refsource_FULLDISC

vdb-entry

x_refsource_BID

third-party-advisory

x_refsource_SREASON

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.