CVE-2009-1143

Name of the Vulnerable Software and Affected Versions open-vm-tools version 2009.03.18-154848

Description The issue is related to the mount.vmhgfs component of the open-vm-tools package, which incorrectly handles symbolic links before accessing a file. This can allow an attacker to access confidential data, compromise its integrity, and cause a denial of service. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs.

Recommendations For open-vm-tools version 2009.03.18-154848, consider disabling the mount.vmhgfs component until a patch is available to prevent exploitation via a symlink attack. Restrict access to the mount.vmhgfs component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.