CVE:CVE-2008-0967
CNNVD:CNNVD-200806-088
VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。
Linux版本的VMware产品中包含有以set-uid root安装的程序vmware-authd，在执行时该程序会从用户的VMware配置文件读取配置选项，而其中的一个选项允许用户指定程序查找共享库模块所在的目录。通过加载特制的库，攻击者就可以以提升的权限执行任意代码。
solution:Upgrade vmware esx_server to a higher version than 2.5.5,3.1,3.2,3.3,3.5,and avoid the version 2.5.5,3.1,3.2,3.3,3.5; Upgrade vmware esxi to a higher version than 3.5,and avoid the version 3.5; Upgrade vmware player to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,2.0,2.0.1,2.0.2,2.0.3,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,2.0,2.0.1,2.0.2,2.0.3; Upgrade vmware server to a higher version than 1.0.3,and avoid the version 1.0.3; Upgrade vmware vmware_server to a higher version than 1.0.0,1.0.1,1.0.2,1.0.4,1.0.5,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.4,1.0.5; Upgrade vmware vmware_workstation to a higher version than 5.5.0,5.5.2,5.5.5,5.5.6,6.0.1,6.0.2,6.0.3,and avoid the version 5.5.0,5.5.2,5.5.5,5.5.6,6.0.1,6.0.2,6.0.3; Upgrade vmware workstation to a higher version than 5.5.1,5.5.3,5.5.4,6.0,and avoid the version 5.5.1,5.5.3,5.5.4,6.0; Upgrade vmware esx to a higher version than 3.0.0,3.0.1,3.0.2,and avoid the version 3.0.0,3.0.1,3.0.2