CVE-2009-1142

Name of the Vulnerable Software and Affected Versions open-vm-tools version 2009.03.18-154848

Description An issue was discovered in open-vm-tools where local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory function is enabled.

Recommendations For open-vm-tools version 2009.03.18-154848, consider disabling the ChmodChownDirectory function or removing the setuid root bit from vmware-user-suid-wrapper as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.