CVE-2005-4459

Published: Dec 21, 2005Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands.

Affected (20)

Products: Vmware: Ace, Gsx Server, Player, Workstation

4 products

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Vmware Ace	Version 1.0
Vmware Gsx Server	Version 2.0.1_build_2129
Vmware Gsx Server	Version 2.0
Vmware Gsx Server	Version 2.5.1
Vmware Gsx Server	Version 2.5.1_build_5336
Vmware Gsx Server	Version 2.5.2
Vmware Gsx Server	Version 3.0
Vmware Gsx Server	Version 3.0_build_7592
Vmware Gsx Server	Version 3.1
Vmware Gsx Server	Version 3.2
Vmware Player	Version 1.0.0
Vmware Workstation	Version 3.2.1 patch1
Vmware Workstation	Version 3.4
Vmware Workstation	Version 4.0.1
Vmware Workstation	Version 4.0.2
Vmware Workstation	Version 4.0
Vmware Workstation	Version 4.5.2
Vmware Workstation	Version 4.5.2_build_8848 r4
Vmware Workstation	Version 5.0.0_build_13124
Vmware Workstation	Version 5.5

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (26)

http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.html

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/18162

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/18344

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/282

Source: cve@mitre.org

http://securityreason.com/securityalert/289

Source: cve@mitre.org

http://securitytracker.com/id?1015401

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200601-04.xml

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/856689

Source: cve@mitre.org

US Government Resource

http://www.securityfocus.com/archive/1/419997/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/420017/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/15998

Source: cve@mitre.org

Patch

http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2000

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2005/3013

Source: cve@mitre.org

Vendor Advisory

http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://secunia.com/advisories/18162

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/18344

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/282

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/289

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015401

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200601-04.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/856689

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.securityfocus.com/archive/1/419997/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/420017/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15998

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2000

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.vupen.com/english/advisories/2005/3013

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.