CVE-2011-1681

published 2011-04-10

CVE-2011-1681: vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and earlier attempts to append to the /etc/mtab file without first…

low 3.3 CVSS 3.1

AV L AC M Au N C P I P A N

vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and earlier attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to trigger corruption of this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	open-vm-tools	< open-vm-tools 2:8.4.2+2011.08.21-471295-1 (bookworm)	open-vm-tools 2:8.4.2+2011.08.21-471295-1 (bookworm)
vmware	open-vm-tools	<= 8.4.2-261024	—
vmware	open-vm-tools	>= 0 < 2:8.4.2+2011.08.21-471295-1	2:8.4.2+2011.08.21-471295-1
vmware	open-vm-tools	>= 0 < 2:8.4.2+2011.08.21-471295-1	2:8.4.2+2011.08.21-471295-1
vmware	open-vm-tools	>= 0 < 2:8.4.2+2011.08.21-471295-1	2:8.4.2+2011.08.21-471295-1
vmware	open-vm-tools	>= 0 < 2:8.4.2+2011.08.21-471295-1	2:8.4.2+2011.08.21-471295-1

CVSS provenance

nvd 3.3 LOW AV:L/AC:M/Au:N/C:P/I:P/A:N

osv 3.3 LOW