CVE:CVE-2005-4459
CNNVD:CNNVD-200512-496
VMWare是一款"虚拟PC"软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。
由于Vmnat无法正确的处理特制的EPRT和PORT FTP请求，导致Windows主机的vmnat.exe和Linux系统的vmnet-natd上存在安全漏洞。恶意用户可以使用NAT联网配置在目标机器上执行任意代码。
solution:Upgrade vmware ace to a higher version than 1.0,and avoid the version 1.0; Upgrade vmware gsx_server to a higher version than 2.0,2.0.1_build_2129,2.5.1,2.5.1_build_5336,2.5.2,3.0,3.0_build_7592,3.1,3.2,and avoid the version 2.0,2.0.1_build_2129,2.5.1,2.5.1_build_5336,2.5.2,3.0,3.0_build_7592,3.1,3.2; Upgrade vmware player to a higher version than 1.0.0,and avoid the version 1.0.0; Upgrade vmware workstation to a higher version than 3.2.1:patch1,3.4,4.0,4.0.1,4.0.2,4.5.2,4.5.2_build_8848:r4,5.0.0_build_13124,5.5,and avoid the version 3.2.1:patch1,3.4,4.0,4.0.1,4.0.2,4.5.2,4.5.2_build_8848:r4,5.0.0_build_13124,5.5