CVE-2010-2427
published 2010-07-22CVE-2010-2427: VMware Studio 2.0 does not properly write to temporary files, which allows local users to gain privileges via unspecified vectors.
PriorityP419medium4.4CVSS 2.0
AVLACMAuNCPIPAP
EPSS
0.32%
23.9th percentile
VMware Studio 2.0 does not properly write to temporary files, which allows local users to gain privileges via unspecified vectors.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | studio | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VMware
VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0.
vendor_vmware·2010-07-13
CVE-2010-2427 [HIGH] VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0.
VMSA-2010-0011: VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0.
a. VMware Studio 2.0 remote command execution by Studio user VMware Studio is a development tool to create and manage virtual appliances. VMware Studio itself is a virtual appliance. A vulnerability in the Virtual Appliance Management Infrastructure (VAMI) allows for remote command execution in Studio 2.0 or in virtual appliances created with Studio 2.0. Exploitation of the issue requires authentication to Studio or to the virtual appliance. Studio 2.0 ---------- The vulnerability may be exploited on Studio if both of these conditions apply: - you have Studio 2.0 and - you have created a user account with limited privileges (this is not the default configuration). Studio is
GHSA
GHSA-cmxf-478f-2982: VMware Studio 2
ghsa_unreviewed·2022-05-14
CVE-2010-2427 [MEDIUM] GHSA-cmxf-478f-2982: VMware Studio 2
VMware Studio 2.0 does not properly write to temporary files, which allows local users to gain privileges via unspecified vectors.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.vmware.com/pipermail/security-announce/2010/000101.htmlhttp://secunia.com/advisories/40507http://securitytracker.com/id?1024187http://www.securityfocus.com/archive/1/512311/100/0/threadedhttp://www.securityfocus.com/bid/41568http://www.vupen.com/english/advisories/2010/1791http://www.wmware.com/security/advisories/VMSA-2010-0011.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/60351http://lists.vmware.com/pipermail/security-announce/2010/000101.htmlhttp://secunia.com/advisories/40507http://securitytracker.com/id?1024187http://www.securityfocus.com/archive/1/512311/100/0/threadedhttp://www.securityfocus.com/bid/41568http://www.vupen.com/english/advisories/2010/1791http://www.wmware.com/security/advisories/VMSA-2010-0011.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/60351
2010-07-22
Published