NVD

Id
1321  
Name
CVE-2008-1363  
Description
VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges via an unspecified manipulation of a config.ini file located in an Application Data folder, which can be used for "hijacking the VMX process."  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-03-19  
Modified Date
2013-05-14  
Seq
2008-1363  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
8299 1321 CVE-2008-1363 [security-announce] 20080317 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues  View
8300 1321 CVE-2008-1363 GLSA-201209-25  View
8301 1321 CVE-2008-1363 3755  View
8302 1321 CVE-2008-1363 1019622  View
8303 1321 CVE-2008-1363 20080318 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues  View
8304 1321 CVE-2008-1363 28276  View
8305 1321 CVE-2008-1363 http://www.vmware.com/security/advisories/VMSA-2008-0005.html  View
8306 1321 CVE-2008-1363 http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html  View
8307 1321 CVE-2008-1363 http://www.vmware.com/support/player/doc/releasenotes_player.html  View
8308 1321 CVE-2008-1363 http://www.vmware.com/support/player2/doc/releasenotes_player2.html  View
8309 1321 CVE-2008-1363 http://www.vmware.com/support/server/doc/releasenotes_server.html  View
8310 1321 CVE-2008-1363 http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html  View
8311 1321 CVE-2008-1363 http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html  View
8312 1321 CVE-2008-1363 ADV-2008-0905  View
8313 1321 CVE-2008-1363 vmware-config-privilege-escalation(41252)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47128 JVNDB-2008-002438 複数の VMware 製品における権限を取得される脆弱性 複数の VMware 製品には、ローカルユーザ環境で config.ini ファイルを不正に操作することにより、権限を取得される脆弱性が存在します。 CVE-2008-1363 31476 CVE-2008-1363 1321 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002438.html 2008-03-17 2010-09-13 View