Detections
Analytics
VMware VIX API Multiple Buffer Overflow Vulnerabilities
high Nessus Plugin ID 33106
Synopsis
The remote host contains an application that is affected by multiple buffer overflow vulnerabilities.Description
VMware VIX, an application programming interface to manipulate virtual machines is installed on the remote host.The installed version of VMware VIX API is affected by multiple buffer overflow vulnerabilities. Successful exploitation of these issues could allow arbitrary code execution on the host operating system from the guest system.
Solution
Upgrade to VMware VIX API 1.1.4 or higher.See Also
https://www.vmware.com/security/advisories/VMSA-2008-0009.html
Plugin Details
Severity: High
ID: 33106
File Name: vmware_vix_api_buffer_overflow.nasl
Version: 1.16
Type: local
Agent: windows
Family: Windows
Published: 6/9/2008
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.5
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:vmware:vmware_workstation, cpe:/a:vmware:ace, cpe:/a:vmware:esx_server, cpe:/o:vmware:esxi, cpe:/a:vmware:fusion, cpe:/a:vmware:player, cpe:/a:vmware:server
Required KB Items: SMB/Registry/Enumerated
Exploit Ease: No known exploits are available
Reference Information
CVE: CVE-2008-2100
BID: 29552