CVE Vulnerabilities

CVE-2014-4200

Published: Aug 28, 2014 | Modified: Aug 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.7 MEDIUM
AV:L/AC:M/Au:N/C:C/I:N/A:N
RedHat/V2
1.9 LOW
AV:L/AC:M/Au:N/C:P/I:N/A:N
RedHat/V3
Ubuntu

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-support archive, which allows local users to obtain sensitive information by extracting files from this archive.

Affected Software

Name Vendor Start Version End Version
Tools Vmware * *
Vm-support Vmware 0.88 (including) 0.88 (including)
Workstation Vmware * 10.0.3 (including)
Workstation Vmware 10.0 (including) 10.0 (including)
Workstation Vmware 10.0.1 (including) 10.0.1 (including)
Workstation Vmware 10.0.2 (including) 10.0.2 (including)
Red Hat Enterprise Linux 7 RedHat open-vm-tools-0:9.10.2-4.el7 *

References