vulnerability

Debian: CVE-2009-1143: open-vm-tools -- security update

Severity
7
CVSS
(AV:L/AC:M/Au:S/C:C/I:C/A:C)
Published
2022-11-23
Added
2024-07-30
Modified
2025-05-22

Description

An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs (aka hgfsmounter).

Solution(s)

debian-upgrade-open-vm-toolsno-fix-debian-deb-package
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.