The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS accessible through anonymous VIX API calls, which has unknown impact and attack vectors.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://security.gentoo.org/glsa/glsa-201209-25.xml | vendor-advisory x_refsource_GENTOO |
| http://securityreason.com/securityalert/3755 | third-party-advisory x_refsource_SREASON |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/41551 | vdb-entry x_refsource_XF |
| http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html | x_refsource_CONFIRM |
| http://www.vmware.com/support/player2/doc/releasenotes_player2.html | x_refsource_CONFIRM |
| http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html | x_refsource_CONFIRM |
| http://www.securityfocus.com/archive/1/489739/100/0/threaded | mailing-list x_refsource_BUGTRAQ |
| http://lists.vmware.com/pipermail/security-announce/2008/000008.html | mailing-list x_refsource_MLIST |
| http://www.vmware.com/security/advisories/VMSA-2008-0005.html | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/28276 | vdb-entry x_refsource_BID |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://security.gentoo.org/glsa/glsa-201209-25.xml | vendor-advisory x_refsource_GENTOO x_transferred |
| http://securityreason.com/securityalert/3755 | third-party-advisory x_refsource_SREASON x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/41551 | vdb-entry x_refsource_XF x_transferred |
| http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html | x_refsource_CONFIRM x_transferred |
| http://www.vmware.com/support/player2/doc/releasenotes_player2.html | x_refsource_CONFIRM x_transferred |
| http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html | x_refsource_CONFIRM x_transferred |
| http://www.securityfocus.com/archive/1/489739/100/0/threaded | mailing-list x_refsource_BUGTRAQ x_transferred |
| http://lists.vmware.com/pipermail/security-announce/2008/000008.html | mailing-list x_refsource_MLIST x_transferred |
| http://www.vmware.com/security/advisories/VMSA-2008-0005.html | x_refsource_CONFIRM x_transferred |
| http://www.securityfocus.com/bid/28276 | vdb-entry x_refsource_BID x_transferred |