First published: Sat Aug 02 2003(Updated: )
VMware GSX Server 2.5.1 build 4968 and earlier, and Workstation 4.0 and earlier, allows local users to gain root privileges via certain enivronment variables that are used when launching a virtual machine session.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
VMware Workstation | =4.0 | |
VMware GSX Server | =2.5.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2003-0631 is considered a critical vulnerability as it allows local users to gain root privileges on the affected systems.
To fix CVE-2003-0631, upgrade to VMware GSX Server version 2.5.2 or later and VMware Workstation version 4.0.1 or later.
CVE-2003-0631 affects local users running VMware GSX Server version 2.5.1 and VMware Workstation version 4.0 and earlier.
CVE-2003-0631 is caused by improper handling of environment variables used during the launch of a virtual machine session.
There are no current reports of active exploitation for CVE-2003-0631, but due to its severity, it is recommended to apply the fix immediately.