CVE-2005-4459: Buffer Overflow
Published Dec 21, 2005
·Updated
Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands.
Affected Software
21 affected components
VMware GSX Server=3.0_build_7592
VMware GSX Server=3.2
VMware ACE=1.0
VMware Workstation=5.0.0_build_13124
VMware Workstation=4.0
VMware GSX Server=2.5.2
VMware Workstation=4.0.1
VMware Workstation=3.4
VMware Workstation=5.5
VMware Workstation=4.0.2
VMware Workstation=3.2.1-patch1
VMware GSX Server=3.0
VMware Workstation=4.5.2_build_8848-r4
VMware GSX Server=2.0
VMware GSX Server=2.5.1_build_5336
VMware GSX Server=2.5.1
VMware Player=1.0.0
VMware GSX Server=3.1
VMware GSX Server=2.0.1_build_2129
VMware Workstation=4.5.2
VMware ACE=1.0.1
Remediation
Patch Available
Patch Available
Event History
Dec 21, 2005
CVE Published
08:03 PM
Data Sourced
via NVD·08:03 PM
RemedyDescriptionSeverityWeaknessAffected Software
Dec 22, 2005
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-4459?
CVE-2005-4459 has a high severity rating due to its potential for remote code execution.
2
How do I fix CVE-2005-4459?
To fix CVE-2005-4459, update the affected VMware products to the latest patched versions provided by VMware.
3
Which VMware products are affected by CVE-2005-4459?
CVE-2005-4459 affects VMware Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0.
4
What type of vulnerability is CVE-2005-4459?
CVE-2005-4459 is a heap-based buffer overflow vulnerability.
5
Can CVE-2005-4459 be exploited remotely?
Yes, CVE-2005-4459 can be exploited remotely by authenticated attackers.