PT-2022-7720
CVE-2009-1142
·
تاريخ النشر
2022-11-23
·
تاريخ التحديث
2022-11-28
الوصف من
CVSS 3.1
6.7
متوسطةالمقاييسAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
open-vm-tools version 2009.03.18-154848
Description
An issue was discovered in open-vm-tools where local users can gain privileges via a symlink attack on /tmp files if
vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory function is enabled.Recommendations
For open-vm-tools version 2009.03.18-154848, consider disabling the
ChmodChownDirectory function or removing the setuid root bit from vmware-user-suid-wrapper as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾