CVE-2008-1361

VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges via an unspecified manipulation that causes the authd process to connect to an arbitrary named pipe, a different vulnerability than CVE-2008-1362.

Link	Resource
http://lists.vmware.com/pipermail/security-announce/2008/000008.html
http://www.vmware.com/security/advisories/VMSA-2008-0005.html	Patch Vendor Advisory
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html	Patch Vendor Advisory
http://www.vmware.com/support/player/doc/releasenotes_player.html	Patch Vendor Advisory
http://www.vmware.com/support/player2/doc/releasenotes_player2.html	Patch Vendor Advisory
http://www.vmware.com/support/server/doc/releasenotes_server.html	Patch Vendor Advisory
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html	Patch Vendor Advisory
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html
http://www.securityfocus.com/bid/28276	Patch
http://securitytracker.com/id?1019621
http://securityreason.com/securityalert/3755
http://www.vupen.com/english/advisories/2008/0905/references
http://security.gentoo.org/glsa/glsa-201209-25.xml
https://exchange.xforce.ibmcloud.com/vulnerabilities/41257
http://www.securityfocus.com/archive/1/489739/100/0/threaded

Configuration 1

cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:* cpe:2.3:a:vmware:ace:1.0.1:*:*:*:*:*:*:* cpe:2.3:a:vmware:vmware_server:1.0.1:*:*:*:*:*:*:* cpe:2.3:a:vmware:player:2.0.1:*:*:*:*:*:*:* cpe:2.3:a:vmware:player:2.0.2:*:*:*:*:*:*:* cpe:2.3:a:vmware:player:1.0.2:*:*:*:*:*:*:* cpe:2.3:a:vmware:vmware_server:1.0.3:*:*:*:*:*:*:* cpe:2.3:a:vmware:ace:2.0:*:*:*:*:*:*:* cpe:2.3:a:vmware:workstation:5.5.4_build_44386:*:*:*:*:*:*:* cpe:2.3:a:vmware:ace:1.0.2:*:*:*:*:*:*:* cpe:2.3:a:vmware:workstation:6.0:*:*:*:*:*:*:* cpe:2.3:a:vmware:workstation:5.5.3_build_34685:*:*:*:*:*:*:* cpe:2.3:a:vmware:vmware_workstation:5.5.5:*:*:*:*:*:*:* cpe:2.3:a:vmware:player:1.0.3:*:*:*:*:*:*:* cpe:2.3:a:vmware:workstation:5.5.3_build_42958:*:*:*:*:*:*:* cpe:2.3:a:vmware:workstation:5.5:*:*:*:*:*:*:* cpe:2.3:a:vmware:vmware_server:1.0.4:*:*:*:*:*:*:* cpe:2.3:a:vmware:player:1.0.4:*:*:*:*:*:*:* cpe:2.3:a:vmware:vmware_workstation:6.0.2:*:*:*:*:*:*:* cpe:2.3:a:vmware:player:1.0.5:*:*:*:*:*:*:* cpe:2.3:a:vmware:vmware_server:1.0.0:*:*:*:*:*:*:* cpe:2.3:a:vmware:ace:1.0.4:*:*:*:*:*:*:* cpe:2.3:a:vmware:ace:1.0.3:*:*:*:*:*:*:* cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:* cpe:2.3:a:vmware:vmware_server:1.0.2:*:*:*:*:*:*:* cpe:2.3:a:vmware:player:2.0:*:*:*:*:*:*:* cpe:2.3:a:vmware:vmware_workstation:6.0.1:*:*:*:*:*:*:* cpe:2.3:a:vmware:workstation:5.5.4:*:*:*:*:*:*:*

---

Published : 2008-03-20 12:44

Updated : 2018-10-11 08:32

---

NVD link : CVE-2008-1361

Mitre link : CVE-2008-1361

No products.

CWE-264