Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2011-1681

Overview

Vulnerability Score 3.3 3.3
CVE Id CVE-2011-1681
Last Modified 06 Sep 2011 11:16:22
Published 09 Apr 2011 10:55:02
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact NONE NONE
Access Vector LOCAL
Access Complexity MEDIUM
Authentication NONE

CVE-2011-1681

Summary

vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and earlier attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to trigger corruption of this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

Vulnerable Systems

Application

  • Vmware Open-vm-tools 8.4.2-261024


References

SUSE - openSUSE-SU-2011:0617

MISC - https://bugzilla.redhat.com/show_bug.cgi?id=688980

XF - vmware-vmwarehgfsmounter-sec-bypass(66699)

SECUNIA - 44904

MLIST - [oss-security] 20110401 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

MLIST - [oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

MLIST - [oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

MLIST - [oss-security] 20110315 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

MLIST - [oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

MLIST - [oss-security] 20110307 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

MLIST - [oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

MLIST - [oss-security] 20110303 Suid mount helpers fail to anticipate RLIMIT_FSIZE

MLIST - [oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

MLIST - [oss-security] 20110303 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE


Last Updated: 27 May 2016 10:56:24