CVE-2010-4295
published 2010-12-06CVE-2010-4295: Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build…
PriorityP422medium6.9CVSS 2.0
AVLACMAuNCCICAC
EPSS
0.29%
20.7th percentile
Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via vectors involving temporary files.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | esxi | — | — |
| vmware | fusion | — | — |
| vmware | fusion | — | — |
| vmware | fusion | — | — |
| vmware | player | — | — |
| vmware | player | — | — |
| vmware | player | — | — |
| vmware | server | — | — |
| vmware | vmware_fusion | — | — |
| vmware | vmware_tools | — | — |
| vmware | vmware_workstation | — | — |
| vmware | workstation | — | — |
| vmware | workstation | — | — |
| vmware | workstation | — | — |
| vmware | workstation | — | — |
| vmware | workstation | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fmhg-h6vw-qwgj: Race condition in the mounting process in vmware-mount in VMware Workstation 7
ghsa_unreviewed·2022-05-14
CVE-2010-4295 [MEDIUM] CWE-362 GHSA-fmhg-h6vw-qwgj: Race condition in the mounting process in vmware-mount in VMware Workstation 7
Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via vectors involving temporary files.
VMware
VMware hosted products and ESX patches resolve multiple security issues
vendor_vmware·2010-12-02·CVSS 6.9
CVE-2010-4294 [MEDIUM] VMware hosted products and ESX patches resolve multiple security issues
VMSA-2010-0018: VMware hosted products and ESX patches resolve multiple security issues
a. VMware Workstation, Player and Fusion vmware-mount race condition The way temporary files are handled by the mounting process could result in a race condition. This issue could allow a local user on the host to elevate their privileges. VMware Workstation and Player running on Microsoft Windows are not affected. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2010-4295 to this issue . VMware would like to thank Dan Rosenberg for reporting this issue. The following table lists what action remediates the vulnerability (column 4) if a solution is available. VMware Product ============= Product Version ======== Running On ======= Replace with Apply Path =======
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.vmware.com/pipermail/security-announce/2010/000112.htmlhttp://osvdb.org/69585http://secunia.com/advisories/42453http://secunia.com/advisories/42482http://www.securityfocus.com/archive/1/514995/100/0/threadedhttp://www.securityfocus.com/bid/45167http://www.securitytracker.com/id?1024819http://www.securitytracker.com/id?1024820http://www.vmware.com/security/advisories/VMSA-2010-0018.htmlhttp://www.vupen.com/english/advisories/2010/3116http://lists.vmware.com/pipermail/security-announce/2010/000112.htmlhttp://osvdb.org/69585http://secunia.com/advisories/42453http://secunia.com/advisories/42482http://www.securityfocus.com/archive/1/514995/100/0/threadedhttp://www.securityfocus.com/bid/45167http://www.securitytracker.com/id?1024819http://www.securitytracker.com/id?1024820http://www.vmware.com/security/advisories/VMSA-2010-0018.htmlhttp://www.vupen.com/english/advisories/2010/3116
2010-12-06
Published