S-197: VMWare Products Shared Folders "MultiByteToWideChar()' Variant Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-197: VMWare Products Shared Folders "MultiByteToWideChar()' Variant Vulnerability
# 1  
Old 02-25-2008
S-197: VMWare Products Shared Folders "MultiByteToWideChar()' Variant Vulnerability

Multiple VMWare products are prone to a directory-traversal vulnerability that affects shared folders. The risk is MEDIUM. Attackers who can access a guest operating system can exploit this issue to gain full read and write access to the filesystem of the host operating system. Successful attacks could compromise the affected host OS.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

6 More Discussions You Might Find Interesting

1. Linux

Read only access for Group called "Developers" to all folders on the Centos 6.6

Linux Gurus, I need to provide Read only access for particular group of users, they should have Read only access to entire server except their Home directory. I tried using setfacl that's not helping. Can you please suggest is there any other alternate way to address this request. Your help is... (5 Replies)
Discussion started by: shekar777
5 Replies

2. AIX

How to make existing volume group "shared"?

We have a 2 node cluster in which only the primary actually mounts the shared VGs at any specific time. We recently added a volume group to the primary. * The disks in it are visible to both nodes, but the secondary does not know about the new VG. * The new VG is not a "shared volume group" *... (10 Replies)
Discussion started by: ridgetop01
10 Replies

3. Solaris

Shared Folders in VMWare and Oracle Solaris 11

ive a Winows 7 Host and Guest is Oracle Solaris 11, i read the vmware guide, but still wont work, since the "mount" command changed in solaris i guess, mount -t vmhgfs .host/foo /tmp/foo says that -t isnt recognized. anyone knows how to do it? thank you. (2 Replies)
Discussion started by: JonhyM
2 Replies

4. HP-UX

ld: (Warning) Symbol "XXX" is not exported but is imported by a shared

Hi, I am trying to build the package for my build tree built with HP UX ecom compiler. I added the flags +check=all to enable run time checks. I compile the tree successfully, but while making the packages I am getting following error: === vxms tests = Generating pgncpio ld: (Warning)... (5 Replies)
Discussion started by: prits31
5 Replies

5. UNIX for Dummies Questions & Answers

Removing empty folders using the "find" command

Hi I'm trying to remove empty sub-folders from 1 main folder using the find method, but the "- empty" parameter isn't recognized by my Unix version. Any idea how to implement such thing? Thanks. (3 Replies)
Discussion started by: biot
3 Replies

6. Programming

shared object "undefined symbol: fstat" error

Didn't have this problem in AIX, but ported to Linux with GCC compiler and am now getting a runtime error: tssutil: symbol lookup error: /work/agility/devel/bin/libagam.so: undefined symbol: fstat I'm sure most of you know that fstat is an intrinsic function just like printf, memcpy, etc. When I... (5 Replies)
Discussion started by: marcus121
5 Replies
Login or Register to Ask a Question
LIBGUESTLIB(3)							   Open VM Tools						    LIBGUESTLIB(3)

NAME
libguestlib - vmware shared library DESCRIPTION
This is a shared object intended for use in other applications. It provides access to some configuration and performance data available in the host. SEE ALSO
vmware-checkvm(1) vmware-hgfsclient(1) vmware-toolbox(1) vmware-toolbox-cmd(1) vmware-user(1) vmware-xferlogs(1) libvmtools(3) vmware-guestd(8) vmware-hgfsmounter(8) vmware-user-suid-wrapper(8) vmci(9) vmhgfs(9) vmmemctl(9) vmsock(9) vmsync(9) vmxnet(9) vmxnet3(9) HOMEPAGE
More information about libguestlib and the Open VM Tools can be found at <http://open-vm-tools.sourceforge.net/>. AUTHOR
Open VM Tools were written by VMware, Inc. <http://www.vmware.com/>. This manual page was put together from homepage materials by Daniel Baumann <daniel.baumann@progress-technologies.net>, for the Debian project (but may be used by others). 2010.03.20-243334 2010-04-08 LIBGUESTLIB(3)