NetSight
IP …
medium5.0Public exploit code

CVE-2009-0177

vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Player 2.5.1 bu…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Player 2.5.1 build 126130, 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 2.0.x before 2.0.1 build 156745; and VMware Fusion before 2.0.2 build 147997 allows remote attackers to cause a denial of service (daemon crash) via a long (1) USER or (2) PASS command.

Affected products

VendorProductAffected versions
VmwareAce
through 2.5.1
Version 2.5.0
VmwareFusion
through 2.0.1
VmwareServer
Version 2.0.0
VmwareVmware Player
through 2.5.1
Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4
VmwareVmware Workstation
through 6.51
Versions 4.5.3, 5.0, 5.5.0, 5.5.1, 5.5.2

Weakness classification

CWE-399

References