CVE

Id
31084  
CVE No.
CVE-2008-0967  
Status
Candidate  
Description
Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMware Player 1.x before 1.0.7 build 91707 and 2.x before 2.0.4 build 93057, and VMware Server before 1.0.6 build 91891 on Linux, and VMware ESXi 3.5 and VMware ESX 2.5.4 through 3.5, allows local users to gain privileges via a library path option in a configuration file.  
Phase
Assigned (20080225)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
331150 31084 CVE-2008-0967 IDEFENSE:20080604 VMware Multiple Products vmware-authd Untrusted Library Loading Vulnerability  View
331151 31084 CVE-2008-0967 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=713  View
331152 31084 CVE-2008-0967 BUGTRAQ:20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues  View
331153 31084 CVE-2008-0967 URL:http://www.securityfocus.com/archive/1/archive/1/493080/100/0/threaded  View
331154 31084 CVE-2008-0967 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2008-0009.html  View
331155 31084 CVE-2008-0967 GENTOO:GLSA-201209-25  View
331156 31084 CVE-2008-0967 URL:http://security.gentoo.org/glsa/glsa-201209-25.xml  View
331157 31084 CVE-2008-0967 BID:29557  View
331158 31084 CVE-2008-0967 URL:http://www.securityfocus.com/bid/29557  View
331159 31084 CVE-2008-0967 OVAL:oval:org.mitre.oval:def:4768  View
331160 31084 CVE-2008-0967 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4768  View
331161 31084 CVE-2008-0967 OVAL:oval:org.mitre.oval:def:5583  View
331162 31084 CVE-2008-0967 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5583  View
331163 31084 CVE-2008-0967 VUPEN:ADV-2008-1744  View
331164 31084 CVE-2008-0967 URL:http://www.vupen.com/english/advisories/2008/1744  View
331165 31084 CVE-2008-0967 SECTRACK:1020198  View
331166 31084 CVE-2008-0967 URL:http://securitytracker.com/id?1020198  View
331167 31084 CVE-2008-0967 SECUNIA:30556  View
331168 31084 CVE-2008-0967 URL:http://secunia.com/advisories/30556  View
331169 31084 CVE-2008-0967 SREASON:3922  View
331170 31084 CVE-2008-0967 URL:http://securityreason.com/securityalert/3922  View
331171 31084 CVE-2008-0967 XF:vmware-vmwareauthd-privilege-escalation(42878)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47201 JVNDB-2008-002511 複数の Barracuda 製品の index.cgi におけるクロスサイトスクリプティングの脆弱性 複数の Barracuda 製品の index.cgi には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-0971 31084 3.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002511.html  View