Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
VMware Tools 后置链接漏洞
Vulnerability Description
VMware Tools是美国威睿(VMware)公司的一套VMWare虚拟机自带的增强工具,它是VMware提供的用于增强虚拟显卡和硬盘性能、以及同步虚拟机与主机时钟的驱动程序。 VMware Workstation 10.0.3及之前版本和其他产品中分发的VMware Tools中的vm-support 0.88版本中存在安全漏洞。本地攻击者可通过对/tmp目录下的文件实施符号链接攻击利用该漏洞向任意文件写入数据。
CVSS Information
N/A
Vulnerability Type
N/A