CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Permissions Privileges and Access Controls
Summary: vmware-mount in vmware workstation 8.x and 9.x and vmware player 4.x and 5.x, on systems based on debian gnu/linux, allows host os users to gain host os privileges via a crafted lsb_release binary in a directory in the path, related to use of the popen library function. per: http://www.vmware.com/security/advisories/vmsa-2013-0010.html

"the issue is present when workstation or player are installed on a debian-based version of linux."
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2013-08-24
Last Modified Date: 2013-08-26
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Permissions Privileges and Access Controls.
user
CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Permissions Privileges and Access Controls
Summary: vmware-mount in vmware workstation 8.x and 9.x and vmware player 4.x and 5.x, on systems based on debian gnu/linux, allows host os users to gain host os privileges via a crafted lsb_release binary in a directory in the path, related to use of the popen library function. per: http://www.vmware.com/security/advisories/vmsa-2013-0010.html

"the issue is present when workstation or player are installed on a debian-based version of linux."
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2013-08-24
Last Modified Date: 2013-08-26
assistant