Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges via an unspecified manipulation that causes the authd process to connect to an arbitrary named pipe, a different vulnerability than CVE-2008-1362.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
VMware Server 命名管道对象获得权限提升或导致拒绝服务攻击漏洞
Vulnerability Description
VMware Server是一款简单易用的服务器虚拟工具。 VMware Server中存在多个安全漏洞,允许恶意的本地用户获得权限提升或导致拒绝服务。 恶意的Windows用户可以通过导致authd进程连接到打开的受恶意用户控制的命名管道获得LocalSystem权限,还可能利用不安全的命名管道对象获得权限提升或导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A