CVEvulnerability

CVE-2005-4459

10.0 HIGH Published 2005-12-21 Modified 2026-07-07 Official page ↗
Status
Analyzed
Published
2005-12-21
Last modified
2026-07-07
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands.

Affected configurations

• vmware ace 1.0.1 • vmware gsx server 2.0 • vmware gsx server 2.0.1 build 2129 • vmware gsx server 2.5.1 • vmware gsx server 2.5.1 build 5336 • vmware gsx server 2.5.2 • vmware gsx server 3.0 • vmware gsx server 3.0 build 7592 • vmware gsx server 3.1 • vmware gsx server 3.2 • vmware player 1.0.0 • vmware workstation 3.2.1 • vmware workstation 3.4 • vmware workstation 4.0 • vmware workstation 4.0.1 • vmware workstation 4.0.2 • vmware workstation 4.5.2 • vmware workstation 4.5.2 build 8848 • vmware workstation 5.0.0 build 13124 • vmware workstation 5.5

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References