VMWare Studio priovilege escalation
Published:		15.07.2010
Source:		BUGTRAQ
SecurityVulns ID:		10998
Type:		local
Level:		5/10
Description:		Privilege escalation via vami-sfcbd/

CVE:		CVE-2010-2667 (Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 allow remote authenticated users to execute arbitrary commands via vectors involving (1) the Studio virtual appliance or (2) a virtual appliance created by the Studio virtual appliance.)
		CVE-2010-2427 (VMware Studio 2.0 does not properly write to temporary files, which allows local users to gain privileges via unspecified vectors.)

Original document

VMWARE, VMSA-2010-0011 VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0. (15.07.2010)

Discuss:

Read or add your comments to this news (0 comments)