vulnwire
6.8med

CVE-2008-1361

VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x bef…

Published 18 y ago · modified 4 mo ago · JSON

CVSS
6.8
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 28%
Public exploits
0
none known

VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges via an unspecified manipulation that causes the authd process to connect to an arbitrary named pipe, a different vulnerability than CVE-2008-1362.

Exploit prediction (EPSS)

0.35% probability of exploitation in the next 30 days, higher than 28% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.06.8AV:L/AC:L/Au:S/C:C/I:C/A:C

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls
Technology feeds
VMware (RSS, critical only)

References

  • security.gentoo.org /glsa/glsa-201209-25.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • securityreason.com /securityalert/3755 · third-party-advisory, x_refsource_SREASON, x_transferred
  • vmware.com /support/server/doc/releasenotes_server.html · x_refsource_CONFIRM, x_transferred
  • vmware.com /support/ace2/doc/releasenotes_ace2.html · x_refsource_CONFIRM, x_transferred
  • vmware.com /support/player2/doc/releasenotes_player2.html · x_refsource_CONFIRM, x_transferred
  • vmware.com /support/player/doc/releasenotes_player.html · x_refsource_CONFIRM, x_transferred
  • vmware.com /support/ws6/doc/releasenotes_ws6.html · x_refsource_CONFIRM, x_transferred
  • securitytracker.com /id?1019621 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/41257 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /archive/1/489739/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • lists.vmware.com /pipermail/security-announce/2008/000008.html · mailing-list, x_refsource_MLIST, x_transferred
  • vmware.com /support/ws55/doc/releasenotes_ws55.html · x_refsource_CONFIRM, x_transferred
  • vupen.com /english/advisories/2008/0905/references · vdb-entry, x_refsource_VUPEN, x_transferred
  • vmware.com /security/advisories/VMSA-2008-0005.html · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /bid/28276 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.