Detections
Analytics
CVE-2008-1361
high
Description
VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges via an unspecified manipulation that causes the authd process to connect to an arbitrary named pipe, a different vulnerability than CVE-2008-1362.
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/41257
http://www.vupen.com/english/advisories/2008/0905/references
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
http://www.vmware.com/support/server/doc/releasenotes_server.html
http://www.vmware.com/support/player2/doc/releasenotes_player2.html
http://www.vmware.com/support/player/doc/releasenotes_player.html
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html
http://www.vmware.com/security/advisories/VMSA-2008-0005.html
http://www.securityfocus.com/bid/28276
http://www.securityfocus.com/archive/1/489739/100/0/threaded
http://securitytracker.com/id?1019621
http://securityreason.com/securityalert/3755
http://security.gentoo.org/glsa/glsa-201209-25.xml
http://lists.vmware.com/pipermail/security-announce/2008/000008.html