NVD

Id
1349  
Name
CVE-2008-1392  
Description
The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS accessible through anonymous VIX API calls, which has unknown impact and attack vectors.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-03-19  
Modified Date
2013-05-14  
Seq
2008-1392  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
8700 1349 CVE-2008-1392 [security-announce] 20080317 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues  View
8701 1349 CVE-2008-1392 GLSA-201209-25  View
8702 1349 CVE-2008-1392 3755  View
8703 1349 CVE-2008-1392 20080318 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues  View
8704 1349 CVE-2008-1392 28276  View
8705 1349 CVE-2008-1392 http://www.vmware.com/security/advisories/VMSA-2008-0005.html  View
8706 1349 CVE-2008-1392 http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html  View
8707 1349 CVE-2008-1392 http://www.vmware.com/support/player2/doc/releasenotes_player2.html  View
8708 1349 CVE-2008-1392 http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html  View
8709 1349 CVE-2008-1392 vmware-vix-api-unspecified(41551)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47132 JVNDB-2008-002442 複数の VMware 製品のデフォルト設定における脆弱性 複数の VMware 製品のデフォルト設定には、詳細不明な VIX API の呼び出しを経由して、ゲスト OS のコンソールにアクセスが可能となる不備があるため、詳細不明な脆弱性が存在します。 CVE-2008-1392 31505 CVE-2008-1392 1349 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002442.html 2008-03-20 2010-09-13 View