Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2005-4459

Published: 21/12/2005 Updated: 30/10/2018
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Vmware

Vulnerability Summary

Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands.

Vulnerable Product Search on Vulmon Subscribe to Product

vmware gsx server 2.5.2

vmware gsx server 3.0

vmware workstation 4.0

vmware workstation 4.0.1

vmware ace 1.0

vmware gsx server 2.0

vmware gsx server 3.2

vmware player 1.0.0

vmware workstation 4.5.2_build_8848

vmware workstation 5.0.0_build_13124

vmware gsx server 2.0.1_build_2129

vmware gsx server 2.5.1

vmware gsx server 2.5.1_build_5336

vmware workstation 3.2.1

vmware workstation 3.4

vmware workstation 5.5

vmware gsx server 3.0_build_7592

vmware gsx server 3.1

vmware workstation 4.0.2

vmware workstation 4.5.2

References

CWE-119http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.htmlhttp://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2000http://www.securityfocus.com/bid/15998http://secunia.com/advisories/18162http://www.kb.cert.org/vuls/id/856689http://securitytracker.com/id?1015401http://www.gentoo.org/security/en/glsa/glsa-200601-04.xmlhttp://secunia.com/advisories/18344http://securityreason.com/securityalert/282http://securityreason.com/securityalert/289http://www.vupen.com/english/advisories/2005/3013http://www.securityfocus.com/archive/1/420017/100/0/threadedhttp://www.securityfocus.com/archive/1/419997/100/0/threadedhttps://nvd.nist.govhttps://www.kb.cert.org/vuls/id/856689
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook