CVE:CVE-2008-1363
CNNVD:CNNVD-200803-321
VMware Server是一款简单易用的服务器虚拟工具。
VMware Server中存在多个安全漏洞，允许恶意的本地用户获得权限提升或导致拒绝服务。
VMware使用了名为config.ini的配置文件，该文件位于所有用户的应用程序数据目录下。如果控制了这个文件，用户就可以通过劫持VMware VMX进程获得权限提升。
solution:Upgrade vmware ace to a higher version than 1.0.5,2.0.1,and avoid the version [1.0,1.0.5),[2.0,2.0.1); Upgrade vmware player to a higher version than 1.0.6,2.0.3,and avoid the version [1.0.0,1.0.6),[2.0,2.0.3); Upgrade vmware server to a higher version than 1.0.5,and avoid the version [1.0,1.0.5); Upgrade vmware workstation to a higher version than 5.5.6,6.0.3,and avoid the version [5.5,5.5.6),[6.0,6.0.3)