漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is simplified via (1) weak file permissions (Users = Read & Execute) for %PROGRAMFILES%\VMware; and weak registry key permissions (access by Users) for (2) vmmouse, (3) vmscsi, (4) VMTools, (5) vmx_svga, and (6) vmxnet in HKLM\SYSTEM\CurrentControlSet\Services\; which allows local users to perform various privileged actions outside of the guest OS by executing certain files under %PROGRAMFILES%\VMware\VMware Tools, as demonstrated by (a) VMControlPanel.cpl and (b) vmwareservice.exe.
漏洞信息
N/A
漏洞
N/A
漏洞
VMware Workstation 权限管理和访问控制漏洞
漏洞信息
VMware Workstation 5.5.3 build 34685没有向每位用户提供ing队某些特权操作的限制,这会允许本地用户执行限制操作,例如更改系统时间,访问硬件组件并中止"Vmware工具服务"的服务。 注意:对该漏洞得利用可以通过(1)对%PROGRAMFILES%\VMware的弱文件许可(Users = Read & Execute); 和对(2)vmmouse,(3)vmscsi,(4)VMTools,(5)vmx_svga,以及(6)HKLM\SYSTEM\CurrentContr
漏洞信息
N/A
漏洞
N/A