Rapid7 Vulnerability & Exploit Database

VMware Player: Windows-based VMware authd remote denial of service (VMSA-2010-0007) (CVE-2009-3707)

Back to Search

VMware Player: Windows-based VMware authd remote denial of service (VMSA-2010-0007) (CVE-2009-3707)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
10/16/2009
Created
07/25/2018
Added
11/30/2013
Modified
10/15/2015

Description

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware ACE 2.6 before 2.6.1 build 227600 and 2.5.x before 2.5.4 build 246459, and VMware Server 2.x allows remote attackers to cause a denial of service (process crash) via a \x25\xFF sequence in the USER and PASS commands, related to a "format string DoS" issue. NOTE: some of these details are obtained from third party information.

Solution(s)

  • vmware-player-upgrade-2_5_4
  • vmware-player-upgrade-3_0_1

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;