Privilege Escalation Vulnerability in open-vm-tools by VMware
CVE-2009-1142

6.7MEDIUM

Key Information:

Vendor
Vmware
Status
Open Vm Tools
Vendor
CVE Published:
23 November 2022

Summary

A vulnerability in open-vm-tools allows local users to exploit a symlink attack against /tmp files. If the vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory function is enabled, attackers can escalate privileges, potentially compromising system security. This vulnerability highlights the need for secure configurations and timely updates to prevent unauthorized access.

References

https://bugs.gentoo.org/264577
https://github.com/vmware/open-vm-tools/releases/tag/2009...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.