CVE-2010-4295

Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via vectors involving temporary files.

Score

CVSS 2.0 6.9 Medium

Status

Modified - cve@mitre.org

Published

2010-12-06

Last modified

2024-08-07

Weaknesses

CWE-362

Affected products

• Fusion (Vmware)
• Player (Vmware)
• Server (Vmware)
• Workstation (Vmware)

References

• http://lists.vmware.com/pipermail/security-announce/2010/000112.html
• http://osvdb.org/69585
• http://secunia.com/advisories/42453
• http://secunia.com/advisories/42482
• http://www.securityfocus.com/archive/1/514995/100/0/threaded
• http://www.securityfocus.com/bid/45167
• http://www.securitytracker.com/id?1024819
• http://www.securitytracker.com/id?1024820
• http://www.vmware.com/security/advisories/VMSA-2010-0018.html
• http://www.vupen.com/english/advisories/2010/3116