Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 06/11/2017 Updated: 03/10/2019

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 725

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.1, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges.

Vulnerable Product	Search on Vulmon	Subscribe to Product
hashicorp vagrant 5.0.1

# I recently blogged about how the installation process of version 500 of this # plugin could be hihacked by a local attacker or malware in order to escalate # privileges to root Hashicorp pushed some mitigations for this issue fairly # quickly but unfortunately 501 is still exploitable with a slightly different # approach # They removed th ...

CWE-362 https://m4.rkw.io/blog/cve201716001-local-root-privesc-in-hashicorp-vagrantvmwarefusion-501.html https://www.exploit-db.com/exploits/43220/https://nvd.nist.gov https://www.exploit-db.com/exploits/43220/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-16001

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect