CVE-2013-1662
vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to gain host OS...
- Published
- Aug 24, 2013
- Updated
- Sep 17, 2024
- Assigning CNA
- mitre
- Evidence observed
- Aug 22, 2013
Primary CVSS
nvd · CVSS 2.0
AV:L/AC:M/Au:N/C:C/I:C/A:CLow · next 30 days
- Percentile
- 91.6%
- Model date
- Oct 17, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to gain host OS privileges via a crafted lsb_release binary in a directory in the PATH, related to use of the popen library function.
Sources
modules/exploits/linux/local/vmware_mount.rb
Metasploit Framework modulesDeclared conditions
- platform: Linux($.exploit_linux/local/vmware_mount.platform)
- verification: check_declared($.exploit_linux/local/vmware_mount.check)
Metasploit · linux · Aug 29, 2013
Tavis Ormandy · linux · Aug 22, 2013
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.