QwikSec

Security Database

CVE

CWE

Training

CVE-2008-1362

Published: Mar 20, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges or cause a denial of service by impersonating the authd process through an unspecified use of an "insecurely created named pipe," a different vulnerability than CVE-2008-1361.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vendor-advisory

x_refsource_GENTOO

third-party-advisory

x_refsource_SREASON

http://www.vmware.com/support/server/doc/releasenotes_server.html

x_refsource_CONFIRM

http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html

x_refsource_CONFIRM

vmware-namedpipes-privilege-escalation(41259)

vdb-entry

x_refsource_XF

http://www.vmware.com/support/player2/doc/releasenotes_player2.html

x_refsource_CONFIRM

http://www.vmware.com/support/player/doc/releasenotes_player.html

x_refsource_CONFIRM

http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

x_refsource_CONFIRM

vdb-entry

x_refsource_SECTRACK

20080318 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues

mailing-list

x_refsource_BUGTRAQ

[security-announce] 20080317 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues

mailing-list

x_refsource_MLIST

http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html

x_refsource_CONFIRM

vdb-entry

x_refsource_VUPEN

http://www.vmware.com/security/advisories/VMSA-2008-0005.html

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.