CVE-2005-4459 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2005-4459

Modified

More Info Official Page

Source-cve@mitre.org

Published At-21 Dec, 2005 | 20:03

Updated At-16 Apr, 2026 | 00:27

Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

VMware (Broadcom Inc.)

>>ace>>1.0

cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>gsx_server>>2.0

cpe:2.3:a:vmware:gsx_server:2.0:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>gsx_server>>2.0.1_build_2129

cpe:2.3:a:vmware:gsx_server:2.0.1_build_2129:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>gsx_server>>2.5.1

cpe:2.3:a:vmware:gsx_server:2.5.1:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>gsx_server>>2.5.1_build_5336

cpe:2.3:a:vmware:gsx_server:2.5.1_build_5336:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>gsx_server>>2.5.2

cpe:2.3:a:vmware:gsx_server:2.5.2:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>gsx_server>>3.0

cpe:2.3:a:vmware:gsx_server:3.0:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>gsx_server>>3.0_build_7592

cpe:2.3:a:vmware:gsx_server:3.0_build_7592:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>gsx_server>>3.1

cpe:2.3:a:vmware:gsx_server:3.1:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>gsx_server>>3.2

cpe:2.3:a:vmware:gsx_server:3.2:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>player>>1.0.0

cpe:2.3:a:vmware:player:1.0.0:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>workstation>>3.2.1

cpe:2.3:a:vmware:workstation:3.2.1:patch1:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>workstation>>3.4

cpe:2.3:a:vmware:workstation:3.4:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>workstation>>4.0

cpe:2.3:a:vmware:workstation:4.0:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>workstation>>4.0.1

cpe:2.3:a:vmware:workstation:4.0.1:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>workstation>>4.0.2

cpe:2.3:a:vmware:workstation:4.0.2:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>workstation>>4.5.2

cpe:2.3:a:vmware:workstation:4.5.2:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>workstation>>4.5.2_build_8848

cpe:2.3:a:vmware:workstation:4.5.2_build_8848:r4:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>workstation>>5.0.0_build_13124

cpe:2.3:a:vmware:workstation:5.0.0_build_13124:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>workstation>>5.5

cpe:2.3:a:vmware:workstation:5.5:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.html	cve@mitre.org	Exploit
http://secunia.com/advisories/18162	cve@mitre.org	Patch Vendor Advisory
http://secunia.com/advisories/18344	cve@mitre.org	Vendor Advisory
http://securityreason.com/securityalert/282	cve@mitre.org	N/A
http://securityreason.com/securityalert/289	cve@mitre.org	N/A
http://securitytracker.com/id?1015401	cve@mitre.org	N/A
http://www.gentoo.org/security/en/glsa/glsa-200601-04.xml	cve@mitre.org	N/A
http://www.kb.cert.org/vuls/id/856689	cve@mitre.org	US Government Resource
http://www.securityfocus.com/archive/1/419997/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/420017/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/bid/15998	cve@mitre.org	Patch
http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2000	cve@mitre.org	Patch
http://www.vupen.com/english/advisories/2005/3013	cve@mitre.org	Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.html	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://secunia.com/advisories/18162	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://secunia.com/advisories/18344	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://securityreason.com/securityalert/282	af854a3a-2127-422b-91ae-364da2661108	N/A
http://securityreason.com/securityalert/289	af854a3a-2127-422b-91ae-364da2661108	N/A
http://securitytracker.com/id?1015401	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.gentoo.org/security/en/glsa/glsa-200601-04.xml	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.kb.cert.org/vuls/id/856689	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.securityfocus.com/archive/1/419997/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/archive/1/420017/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/15998	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2000	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.vupen.com/english/advisories/2005/3013	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory

Hyperlink: http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.html

Source: cve@mitre.org

Resource:

Exploit

Hyperlink: http://secunia.com/advisories/18162

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://secunia.com/advisories/18344

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://securityreason.com/securityalert/282

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://securityreason.com/securityalert/289

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://securitytracker.com/id?1015401

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-200601-04.xml

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.kb.cert.org/vuls/id/856689

Source: cve@mitre.org

Resource:

US Government Resource

Hyperlink: http://www.securityfocus.com/archive/1/419997/100/0/threaded

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/archive/1/420017/100/0/threaded

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/15998

Source: cve@mitre.org

Resource:

Patch

Hyperlink: http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2000

Source: cve@mitre.org

Resource:

Patch

Hyperlink: http://www.vupen.com/english/advisories/2005/3013

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Hyperlink: http://secunia.com/advisories/18162

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: http://secunia.com/advisories/18344

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://securityreason.com/securityalert/282

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://securityreason.com/securityalert/289

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://securitytracker.com/id?1015401

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-200601-04.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.kb.cert.org/vuls/id/856689

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

US Government Resource

Hyperlink: http://www.securityfocus.com/archive/1/419997/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/archive/1/420017/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/15998

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Hyperlink: http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2000

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Hyperlink: http://www.vupen.com/english/advisories/2005/3013

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory