CVE-2013-1662

vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to gain host OS privileges via a crafted lsb_release binary in a directory in the PATH, related to use of the popen library function.

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

4.64% chance of exploitation in the next 30 days, 91th percentile

Published

2013-08-24

Updated

2024-09-17

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmware_mount.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/40169
• https://www.exploit-db.com/exploits/27938

References

• CVE Record
• NVD entry

Related

• CVE-2013-1651
• CVE-2013-1668
• CVE-2013-1650
• CVE-2013-1670
• CVE-2013-1649
• CVE-2013-1690