CVE-2008-0923
published 2008-02-26CVE-2008-0923: Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1.0.2 and 2.0.2, Player 1.0.4 and 2.0.2, and Workstation 5.5.4 and 6.0.2 allows…
PriorityP423medium6.9CVSS 2.0
AVLACMAuNCCICAC
EPSS
0.49%
41.0th percentile
Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1.0.2 and 2.0.2, Player 1.0.4 and 2.0.2, and Workstation 5.5.4 and 6.0.2 allows guest OS users to read and write arbitrary files on the host OS via a multibyte string that produces a wide character string containing .. (dot dot) sequences, which bypasses the protection mechanism, as demonstrated using a "%c0%2e%c0%2e" string.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | ace | — | — |
| vmware | ace | — | — |
| vmware | ace | — | — |
| vmware | ace | — | — |
| vmware | ace | — | — |
| vmware | player | — | — |
| vmware | vmware_fusion | — | — |
| vmware | vmware_player | — | — |
| vmware | vmware_player | — | — |
| vmware | vmware_player | — | — |
| vmware | vmware_workstation | — | — |
| vmware | vmware_workstation | — | — |
| vmware | vmware_workstation | — | — |
| vmware | workstation | — | — |
| vmware | workstation | — | — |
| vmware | workstation | — | — |
| vmware | workstation | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VMware
Several critical security vulnerabilities have been addressed in the newest releases of VMware's hosted product line
vendor_vmware·2008-03-17·CVSS 6.9
CVE-2006-2937 [MEDIUM] Several critical security vulnerabilities have been addressed in the newest releases of VMware's hosted product line
VMSA-2008-0005: Several critical security vulnerabilities have been addressed in the newest releases of VMware's hosted product line
a. Host to guest shared folder (HGFS) traversal vulnerability On Windows hosts, if you have configured a VMware host to guest shared folder (HGFS), it is possible for a program running in the guest to gain access to the host's file system and create or modify executable files in sensitive locations. NOTE: VMware Server is not affected because it doesn't use host to guest shared folders. No versions of ESX Server, including ESX Server 3i, are affected by this vulnerability. Because ESX Server is based on a bare-metal hypervisor architecture and not a hosted architecture, and it doesn't include any shared folder abilities. Fusion and Linux based hosted product
GHSA
GHSA-jph2-4993-v6wc: Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1
ghsa_unreviewed·2022-05-01
CVE-2008-0923 [MEDIUM] CWE-22 GHSA-jph2-4993-v6wc: Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1
Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1.0.2 and 2.0.2, Player 1.0.4 and 2.0.2, and Workstation 5.5.4 and 6.0.2 allows guest OS users to read and write arbitrary files on the host OS via a multibyte string that produces a wide character string containing .. (dot dot) sequences, which bypasses the protection mechanism, as demonstrated using a "%c0%2e%c0%2e" string.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1004034http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060457.htmlhttp://lists.vmware.com/pipermail/security-announce/2008/000008.htmlhttp://secunia.com/advisories/29117http://securityreason.com/securityalert/3700http://www.coresecurity.com/?action=item&id=2129http://www.securityfocus.com/archive/1/488725/100/0/threadedhttp://www.securityfocus.com/archive/1/489739/100/0/threadedhttp://www.securityfocus.com/bid/27944http://www.securityfocus.com/bid/28276http://www.securitytracker.com/id?1019493http://www.vmware.com/security/advisories/VMSA-2008-0005.htmlhttp://www.vmware.com/support/ace2/doc/releasenotes_ace2.htmlhttp://www.vmware.com/support/player/doc/releasenotes_player.htmlhttp://www.vmware.com/support/player2/doc/releasenotes_player2.htmlhttp://www.vmware.com/support/ws55/doc/releasenotes_ws55.htmlhttp://www.vmware.com/support/ws6/doc/releasenotes_ws6.htmlhttp://www.vupen.com/english/advisories/2008/0679http://www.vupen.com/english/advisories/2008/0905/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/40837http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1004034http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060457.htmlhttp://lists.vmware.com/pipermail/security-announce/2008/000008.htmlhttp://secunia.com/advisories/29117http://securityreason.com/securityalert/3700http://www.coresecurity.com/?action=item&id=2129http://www.securityfocus.com/archive/1/488725/100/0/threadedhttp://www.securityfocus.com/archive/1/489739/100/0/threadedhttp://www.securityfocus.com/bid/27944http://www.securityfocus.com/bid/28276http://www.securitytracker.com/id?1019493http://www.vmware.com/security/advisories/VMSA-2008-0005.htmlhttp://www.vmware.com/support/ace2/doc/releasenotes_ace2.htmlhttp://www.vmware.com/support/player/doc/releasenotes_player.htmlhttp://www.vmware.com/support/player2/doc/releasenotes_player2.htmlhttp://www.vmware.com/support/ws55/doc/releasenotes_ws55.htmlhttp://www.vmware.com/support/ws6/doc/releasenotes_ws6.htmlhttp://www.vupen.com/english/advisories/2008/0679http://www.vupen.com/english/advisories/2008/0905/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/40837
2008-02-26
Published