CVE-2011-2145: Medium severity vmware esxi vulnerability

Published Jun 6, 2011

Updated

mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1, when a Solaris or FreeBSD guest OS is used, allows guest OS users to modify arbitrary guest OS files via unspecified vectors, related to a "procedural error."

Affected Software

19 affected components

VMware ESX=3.0.3

VMware ESX=3.5

VMware ESX=4.0

VMware ESX=4.1

VMware ESXi=3.5

VMware ESXi=4.0

VMware ESXi=4.1

VMware Fusion=3.1

VMware Fusion=3.1.1

VMware Fusion=3.1.2

VMware Player=3.1

VMware Player=3.1.1

VMware Player=3.1.2

VMware Player=3.1.3

VMware Workstation=7.1.1

VMware Workstation=7.1.2

VMware Workstation=7.1.3

FreeBSD FreeBSD

Oracle Solaris

Remediation

Patch Available

http://www.vmware.com/security/advisories/VMSA-2011-0009.html

Event History

Jun 6, 2011

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Data Sourced

07:55 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2011-2145?

CVE-2011-2145 is rated as a high-severity vulnerability affecting various VMware products.

How do I fix CVE-2011-2145?

To fix CVE-2011-2145, upgrade to the patched versions of VMware Workstation, Player, or Fusion as specified in VMware's security advisory.

Which versions are affected by CVE-2011-2145?

CVE-2011-2145 affects VMware Workstation versions prior to 7.1.4, Player before 3.1.4, Fusion before 3.1.3, and certain ESX/ESXi versions.

What types of systems are impacted by CVE-2011-2145?

CVE-2011-2145 impacts systems running Solaris or FreeBSD as guest operating systems within VMware products.

Is there a workaround for CVE-2011-2145?

There are no specific workarounds for CVE-2011-2145 other than upgrading to the secure software versions.