CVE-2008-1361

CWE-2643 documents3 sources
Severity
6.8MEDIUM
EPSS
0.0%
top 87.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Vmware ACEVmware PlayerVmware Server+3 more
Timeline
PublishedMar 20
Latest updateMay 1

Description

VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges via an unspecified manipulation that causes the authd process to connect to an arbitrary named pipe, a different vulnerability than CVE-2008-1362.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.1 | Impact: 10.0

Affected Packages6 packages

▶NVDvmware/player7 versions+6
▶NVDvmware/server1.0.3
▶NVDvmware/workstation6 versions+5
▶NVDvmware/vmware_server5 versions+4
▶NVDvmware/vmware_workstation5.5.5, 6.0.1, 6.0.2+2

Patches

Patch: www.securityfocus.com ↗Patch: www.vmware.com ↗Patch: www.vmware.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-gv98-9r75-xrjg: VMware Workstation 6↗2022-05-01
▶
CVEList
CVE-2008-1361: VMware Workstation 6↗2008-03-20
▶
CVE-2008-1361 (MEDIUM CVSS 6.8) | VMware Workstation 6.0.x before 6.0 | cvebase.io