CVE-2011-1681 - vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and earlier

CVE-2011-1681

Summary

vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and earlier attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to trigger corruption of this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

References

Vulnerable Configurations

cpe:2.3:a:vmware:open-vm-tools:*:*:*:*:*:*:*:*
cpe:2.3:a:vmware:open-vm-tools:*:*:*:*:*:*:*:*

CVSS

Base:	3.3 (as of 17-08-2017 - 01:34)
Impact:
Exploitability:

CWE

CWE-16

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	NONE

cvss-vector via4

AV:L/AC:M/Au:N/C:P/I:P/A:N

refmap via4

misc	https://bugzilla.redhat.com/show_bug.cgi?id=688980
mlist	[oss-security] 20110303 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE [oss-security] 20110303 Suid mount helpers fail to anticipate RLIMIT_FSIZE [oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE [oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE [oss-security] 20110307 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE [oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE [oss-security] 20110315 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE [oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE [oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE [oss-security] 20110401 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE
secunia	44904
suse	openSUSE-SU-2011:0617
xf	vmware-vmwarehgfsmounter-sec-bypass(66699)

Last major update

17-08-2017 - 01:34

Published

10-04-2011 - 02:55

Last modified

17-08-2017 - 01:34