Detections
Analytics
VMware Fusion < 3.1.2 (VMSA-2010-0018)
high Nessus Plugin ID 51079
Language:
Synopsis
The remote host has an application that is affected by three security issues.Description
The version of VMware Fusion installed on the Mac OS X host is earlier than 3.1.2. Such versions are affected by three security issues :- A race condition in the mounting process in vmware-mount in allows host OS users to gain privileges via vectors involving temporary files. (CVE-2010-4295)
- The VMware Tools update functionality allows host OS users to gain privileges on the guest OS via unspecified vectors, related to a 'command injection' issue. (CVE-2010-4297)
- vmware-mount does not properly load libraries, which allows host OS users to gain privileges via vectors involving shared object files. (CVE-2010-4296)
Solution
Upgrade to VMware Fusion 3.1.2 or later.See Also
http://www.vmware.com/security/advisories/VMSA-2010-0018.html
http://lists.vmware.com/pipermail/security-announce/2010/000112.html
Plugin Details
Severity: High
ID: 51079
File Name: macosx_fusion_3_1_2.nasl
Version: 1.7
Type: local
Agent: macosx
Family: MacOS X Local Security Checks
Published: 12/8/2010
Updated: 9/24/2019
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.8
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.6
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:vmware:fusion
Required KB Items: MacOSX/Fusion/Version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 12/2/2010
Vulnerability Publication Date: 12/2/2010