CVE-2008-0923

Published: Feb 26, 2008Modified: Apr 23, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1.0.2 and 2.0.2, Player 1.0.4 and 2.0.2, and Workstation 5.5.4 and 6.0.2 allows guest OS users to read and write arbitrary files on the host OS via a multibyte string that produces a wide character string containing .. (dot dot) sequences, which bypasses the protection mechanism, as demonstrated using a "%c0%2e%c0%2e" string.

Affected (15)

Products: Vmware: Ace, Player, Vmware Player, Vmware Workstation, Workstation

5 products

Vmware Workstation

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Vmware Ace	Version 1.0.2
Vmware Ace	Version 1.0
Vmware Ace	Version 2.0.1
Vmware Ace	Version 2.0.2
Vmware Ace	Version 2.0
Vmware Player	Version 1.0.4
Vmware Vmware Player	Version 1.0.1_build_19317
Vmware Vmware Player	Version 1.0.2
Vmware Vmware Player	Version 1.0.3
Vmware Vmware Workstation	Version 6.0.1
Vmware Vmware Workstation	Version 6.0.2
Vmware Workstation	Version 4.5.2
Vmware Workstation	Version 5.5.3_build_34685
Vmware Workstation	Version 5.5.4
Vmware Workstation	Version 6.0

Related CWEs

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (40)

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1004034

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060457.html

Source: cve@mitre.org

http://lists.vmware.com/pipermail/security-announce/2008/000008.html

Source: cve@mitre.org

http://secunia.com/advisories/29117

Source: cve@mitre.org

http://securityreason.com/securityalert/3700

Source: cve@mitre.org

http://www.coresecurity.com/?action=item&id=2129

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/488725/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/489739/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/27944

Source: cve@mitre.org

http://www.securityfocus.com/bid/28276

Source: cve@mitre.org

http://www.securitytracker.com/id?1019493

Source: cve@mitre.org

http://www.vmware.com/security/advisories/VMSA-2008-0005.html

Source: cve@mitre.org

http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html

Source: cve@mitre.org

http://www.vmware.com/support/player/doc/releasenotes_player.html

Source: cve@mitre.org

http://www.vmware.com/support/player2/doc/releasenotes_player2.html

Source: cve@mitre.org

http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html

Source: cve@mitre.org

http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0679

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0905/references

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/40837

Source: cve@mitre.org

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1004034

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060457.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.vmware.com/pipermail/security-announce/2008/000008.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29117

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/3700

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.coresecurity.com/?action=item&id=2129

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/488725/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/489739/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/27944

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/28276

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1019493

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/security/advisories/VMSA-2008-0005.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/support/player/doc/releasenotes_player.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/support/player2/doc/releasenotes_player2.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0679

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0905/references

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/40837

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.