Detections
Analytics
CVE-2008-1362
high
Description
VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges or cause a denial of service by impersonating the authd process through an unspecified use of an "insecurely created named pipe," a different vulnerability than CVE-2008-1361.
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/41259
http://www.vupen.com/english/advisories/2008/0905/references
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
http://www.vmware.com/support/server/doc/releasenotes_server.html
http://www.vmware.com/support/player2/doc/releasenotes_player2.html
http://www.vmware.com/support/player/doc/releasenotes_player.html
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html
http://www.vmware.com/security/advisories/VMSA-2008-0005.html
http://www.securityfocus.com/bid/28276
http://www.securityfocus.com/archive/1/489739/100/0/threaded
http://securitytracker.com/id?1019621
http://securityreason.com/securityalert/3755
http://security.gentoo.org/glsa/glsa-201209-25.xml
http://lists.vmware.com/pipermail/security-announce/2008/000008.html