CVE-2008-1362

VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges or cause a denial of service by impersonating the authd process through an unspecified use of an "insecurely created named pipe," a different vulnerability than CVE-2008-1361.

Link	Resource
http://lists.vmware.com/pipermail/security-announce/2008/000008.html	Patch
http://www.vmware.com/security/advisories/VMSA-2008-0005.html	Patch
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html	Patch
http://www.vmware.com/support/player/doc/releasenotes_player.html	Patch
http://www.vmware.com/support/player2/doc/releasenotes_player2.html	Patch
http://www.vmware.com/support/server/doc/releasenotes_server.html	Patch
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html	Patch
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html	Patch
http://www.securityfocus.com/bid/28276
http://securitytracker.com/id?1019621
http://securityreason.com/securityalert/3755
http://www.vupen.com/english/advisories/2008/0905/references
http://security.gentoo.org/glsa/glsa-201209-25.xml
https://exchange.xforce.ibmcloud.com/vulnerabilities/41259
http://www.securityfocus.com/archive/1/489739/100/0/threaded

Configuration 1

cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:* cpe:2.3:a:vmware:player:2.0.1:*:*:*:*:*:*:* cpe:2.3:a:vmware:player:2.0.2:*:*:*:*:*:*:* cpe:2.3:a:vmware:player:1.0.2:*:*:*:*:*:*:* cpe:2.3:a:vmware:ace:2.0:*:*:*:*:*:*:* cpe:2.3:a:vmware:workstation:5.5.4_build_44386:*:*:*:*:*:*:* cpe:2.3:a:vmware:workstation:6.0:*:*:*:*:*:*:* cpe:2.3:a:vmware:workstation:5.5.3_build_34685:*:*:*:*:*:*:* cpe:2.3:a:vmware:vmware_workstation:5.5.5:*:*:*:*:*:*:* cpe:2.3:a:vmware:player:1.0.3:*:*:*:*:*:*:* cpe:2.3:a:vmware:workstation:5.5.3_build_42958:*:*:*:*:*:*:* cpe:2.3:a:vmware:workstation:5.5:*:*:*:*:*:*:* cpe:2.3:a:vmware:vmware_server:1.0.4:*:*:*:*:*:*:* cpe:2.3:a:vmware:player:1.0.4:*:*:*:*:*:*:* cpe:2.3:a:vmware:vmware_workstation:6.0.2:*:*:*:*:*:*:* cpe:2.3:a:vmware:player:1.0.5:*:*:*:*:*:*:* cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:* cpe:2.3:a:vmware:vmware_server:1.0.2:*:*:*:*:*:*:* cpe:2.3:a:vmware:player:2.0:*:*:*:*:*:*:* cpe:2.3:a:vmware:vmware_workstation:6.0.1:*:*:*:*:*:*:* cpe:2.3:a:vmware:workstation:5.5.4:*:*:*:*:*:*:*

---

Published : 2008-03-20 12:44

Updated : 2018-10-11 08:32

---

NVD link : CVE-2008-1362

Mitre link : CVE-2008-1362

No products.

CWE-264