CVE-2009-1143: Race Condition
An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs (aka hgfsmounter).
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1143?
The severity of CVE-2009-1143 is high with a severity value of 7.
How does CVE-2009-1143 allow local users to bypass access restrictions?
CVE-2009-1143 allows local users to bypass access restrictions by exploiting a symlink attack using a realpath race condition in mount.vmhgfs (hgfsmounter).
How can I verify if my version of open-vm-tools is affected by CVE-2009-1143?
You can verify if your version of open-vm-tools is affected by CVE-2009-1143 by checking if you are using the version 2009.03.18-154848.
Are there any known fixes or patches for CVE-2009-1143?
Yes, you can find fixes or patches for CVE-2009-1143 in the references provided.
What are the Common Weakness Enumeration (CWE) IDs associated with CVE-2009-1143?
The Common Weakness Enumeration (CWE) IDs associated with CVE-2009-1143 are CWE-362 and CWE-59.