Vulnerability Details : CVE-2011-2145
mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1, when a Solaris or FreeBSD guest OS is used, allows guest OS users to modify arbitrary guest OS files via unspecified vectors, related to a "procedural error."
Products affected by CVE-2011-2145
- cpe:2.3:a:vmware:workstation:7.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:7.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:7.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:player:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:player:3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:player:3.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:player:3.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:3.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:esxi:3.5:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:esxi:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:esxi:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:esx:3.5:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:esx:3.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:esx:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:esx:4.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2011-2145
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 25 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2011-2145
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.3
|
MEDIUM | AV:L/AC:M/Au:N/C:N/I:C/A:C |
3.4
|
9.2
|
NIST |
CWE ids for CVE-2011-2145
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2011-2145
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/67815
Multiple VMware products mount.vmhgfs utility privilege escalation CVE-2011-2145 Vulnerability Report
-
http://www.vmware.com/security/advisories/VMSA-2011-0009.html
VMSA-2011-0009.3Patch;Vendor Advisory
-
http://www.securitytracker.com/id?1025601
VMware Bugs in 'mount.vmhgfs' Let Local Users Gain Elevated Privileges - SecurityTracker
-
https://hermes.opensuse.org/messages/8711677
openSUSE.org - 503
-
http://www.securityfocus.com/bid/48098
Multiple VMware products 'Mount.vmhgfs' Mutiple Security Vulnerabilities
Jump to