Search vulnerabilities

Results 2

Export CSV
CVE-2014-4199

open-vm-tools: insecure temporary file creation

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.

CVSS 2.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2014-4200

open-vm-tools: vm-support's diagnostics archive created with world-readable permissions

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-support archive, which allows local users to obtain sensitive information by extracting files from this archive.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Products