CVEvulnerability
CVE-2008-1361
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-03-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:L/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges via an unspecified manipulation that causes the authd process to connect to an arbitrary named pipe, a different vulnerability than CVE-2008-1362.
Affected configurations
• vmware ace 1.0
• vmware ace 1.0.1
• vmware ace 1.0.2
• vmware ace 1.0.3
• vmware ace 1.0.4
• vmware ace 2.0
• vmware player 1.0.2
• vmware player 1.0.3
• vmware player 1.0.4
• vmware player 1.0.5
• vmware player 2.0
• vmware player 2.0.1
• vmware player 2.0.2
• vmware server 1.0.3
• vmware vmware server 1.0.0
• vmware vmware server 1.0.1
• vmware vmware server 1.0.2
• vmware vmware server 1.0.3
• vmware vmware server 1.0.4
• vmware vmware workstation 5.5.5
• vmware vmware workstation 6.0.1
• vmware vmware workstation 6.0.2
• vmware workstation 5.5
• vmware workstation 5.5.3 build 34685
• vmware workstation 5.5.3 build 42958
• vmware workstation 5.5.4
• vmware workstation 5.5.4 build 44386
• vmware workstation 6.0
Related
Weakness · not in database (1)
References
- http://lists.vmware.com/pipermail/security-announce/2008/000008.html lists.vmware.com
- http://security.gentoo.org/glsa/glsa-201209-25.xml security.gentoo.org
- http://securityreason.com/securityalert/3755 securityreason.com
- http://securitytracker.com/id?1019621 securitytracker.com
- http://www.securityfocus.com/archive/1/489739/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28276 Patch
- http://www.vmware.com/security/advisories/VMSA-2008-0005.html Patch, Vendor Advisory
- http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html Patch, Vendor Advisory
- http://www.vmware.com/support/player/doc/releasenotes_player.html Patch, Vendor Advisory
- http://www.vmware.com/support/player2/doc/releasenotes_player2.html Patch, Vendor Advisory
- http://www.vmware.com/support/server/doc/releasenotes_server.html Patch, Vendor Advisory
- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html Patch, Vendor Advisory
- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html www.vmware.com
- http://www.vupen.com/english/advisories/2008/0905/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41257 exchange.xforce.ibmcloud.com
- http://lists.vmware.com/pipermail/security-announce/2008/000008.html lists.vmware.com
- http://security.gentoo.org/glsa/glsa-201209-25.xml security.gentoo.org
- http://securityreason.com/securityalert/3755 securityreason.com
- http://securitytracker.com/id?1019621 securitytracker.com
- http://www.securityfocus.com/archive/1/489739/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28276 Patch
- http://www.vmware.com/security/advisories/VMSA-2008-0005.html Patch, Vendor Advisory
- http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html Patch, Vendor Advisory
- http://www.vmware.com/support/player/doc/releasenotes_player.html Patch, Vendor Advisory
- http://www.vmware.com/support/player2/doc/releasenotes_player2.html Patch, Vendor Advisory
- http://www.vmware.com/support/server/doc/releasenotes_server.html Patch, Vendor Advisory
- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html Patch, Vendor Advisory
- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html www.vmware.com
- http://www.vupen.com/english/advisories/2008/0905/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41257 exchange.xforce.ibmcloud.com