medium6.9Public exploit code
CVE-2013-1662
vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to gain host OS privil…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VMware - Setuid VMware-mount Popen lsb_release Privilege Escalation2013-08-22 · local · linux · Verified
- VMware - Setuid VMware-mount Unsafe popen(3) (Metasploit)2013-08-29 · local · linux · Verified
Impact
vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to gain host OS privileges via a crafted lsb_release binary in a directory in the PATH, related to use of the popen library function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Workstation | Versions 8.0, 8.0.0.18997, 8.0.1, 8.0.1.27038, 8.0.2, 8.0.3 |
| Vmware | Player | Versions 4.0, 4.0.0.18997, 4.0.1, 4.0.2, 4.0.3, 4.0.4 |