CVE:CVE-2008-1392
CNNVD:CNNVD-200803-323
VMware Server是一款简单易用的服务器虚拟工具。
VMware Server中允许控制台来宾用户使用匿名VIX API调用,借用未明影响和攻击变量
solution:Upgrade vmware ace to a higher version than 2.0,and avoid the version (,2.0]; Upgrade vmware player to a higher version than 2.0.2,and avoid the version (,2.0.2]; Upgrade vmware vmware_workstation to a higher version than 6.0.2,and avoid the version 6.0.2