CVE-2005-4459

Published: Dec 21, 2005Modified: Jul 7, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands.

Affected (20)

Products: Vmware: Ace, Gsx Server, Player, Workstation

4 products

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Vmware Ace	Version 1.0.1
Vmware Gsx Server	Version 2.0.1_build_2129
Vmware Gsx Server	Version 2.0
Vmware Gsx Server	Version 2.5.1
Vmware Gsx Server	Version 2.5.1_build_5336
Vmware Gsx Server	Version 2.5.2
Vmware Gsx Server	Version 3.0
Vmware Gsx Server	Version 3.0_build_7592
Vmware Gsx Server	Version 3.1
Vmware Gsx Server	Version 3.2
Vmware Player	Version 1.0.0
Vmware Workstation	Version 3.2.1 patch1
Vmware Workstation	Version 3.4
Vmware Workstation	Version 4.0.1
Vmware Workstation	Version 4.0.2
Vmware Workstation	Version 4.0
Vmware Workstation	Version 4.5.2
Vmware Workstation	Version 4.5.2_build_8848 r4
Vmware Workstation	Version 5.0.0_build_13124
Vmware Workstation	Version 5.5

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (26)

http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.html

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/18162

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/18344

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/282

Source: cve@mitre.org

Third Party Advisory

http://securityreason.com/securityalert/289

Source: cve@mitre.org

Third Party Advisory

http://securitytracker.com/id?1015401

Source: cve@mitre.org

Permissions Required

http://www.gentoo.org/security/en/glsa/glsa-200601-04.xml

Source: cve@mitre.org

Third Party Advisory

http://www.kb.cert.org/vuls/id/856689

Source: cve@mitre.org

US Government Resource

http://www.securityfocus.com/archive/1/419997/100/0/threaded

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/archive/1/420017/100/0/threaded

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/bid/15998

Source: cve@mitre.org

PatchBroken Link

http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2000

Source: cve@mitre.org

PatchBroken Link

http://www.vupen.com/english/advisories/2005/3013

Source: cve@mitre.org

URL Repurposed

http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://secunia.com/advisories/18162

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/18344

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/282

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://securityreason.com/securityalert/289

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://securitytracker.com/id?1015401

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions Required

http://www.gentoo.org/security/en/glsa/glsa-200601-04.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.kb.cert.org/vuls/id/856689

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.securityfocus.com/archive/1/419997/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securityfocus.com/archive/1/420017/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securityfocus.com/bid/15998

Source: af854a3a-2127-422b-91ae-364da2661108

PatchBroken Link

http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2000

Source: af854a3a-2127-422b-91ae-364da2661108

PatchBroken Link

http://www.vupen.com/english/advisories/2005/3013

Source: af854a3a-2127-422b-91ae-364da2661108

URL Repurposed

Timeline

No history available yet.