Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 241150 (CVE-2008-4279) - app-emulation/vmware-* privilege escalation from guest (CVE-2008-4279)
Summary: app-emulation/vmware-* privilege escalation from guest (CVE-2008-4279)
Status: RESOLVED DUPLICATE of bug 236167
Alias: CVE-2008-4279
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High normal
Assignee: Gentoo Security
URL:
Whiteboard: B3 [stable]
Keywords:
Depends on:
Blocks:
 
Reported: 2008-10-10 20:02 UTC by Stefan Behte (RETIRED)
Modified: 2008-10-19 11:44 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Behte (RETIRED) gentoo-dev Security 2008-10-10 20:02:59 UTC 
CVE-2008-4279 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-4279):
  The CPU hardware emulation for 64-bit guest operating systems in
  VMware Workstation 6.0.x before 6.0.5 build 109488 and 5.x before
  5.5.8 build 108000; Player 2.0.x before 2.0.5 build 109488 and 1.x
  before 1.0.8; Server 1.x before 1.0.7 build 108231; and ESX 2.5.4
  through 3.5 allows authenticated guest OS users to gain additional
  guest OS privileges by triggering an exception that causes the
  virtual CPU to perform an indirect jump to a non-canonical address.
Comment 1 Stefan Behte (RETIRED) gentoo-dev Security 2008-10-10 20:12:54 UTC 
You cannot run an amd64 guest on x86, so this only affects amd64.
We have in tree:

app-emulation/vmware-workstation-5.5.7.91707 (amd64)
app-emulation/vmware-workstation-5.5.8.108000 (~amd64)
app-emulation/vmware-workstation-6.0.4.93057 (~amd64)
app-emulation/vmware-workstation-6.0.5.109488 (~amd64)

app-emulation/vmware-server-1.0.5.80187 (amd64)
app-emulation/vmware-server-1.0.6.91891 (amd64)
app-emulation/vmware-server-1.0.7.108231 (~amd64)

app-emulation/vmware-player-1.0.7.91707 (amd64)
app-emulation/vmware-player-1.0.8.108000 (~amd64)
app-emulation/vmware-player-2.0.4.93057 (~amd64)
app-emulation/vmware-player-2.0.5.109488 (~amd64)

I guess we should mask the old ones. I gave this one B3 because VMs are often used for security purposes and it would have severe consequences if one could escape one VM and control all others.
Comment 2 Mike Auty (RETIRED) gentoo-dev 2008-10-11 00:02:40 UTC 
I think this can probably be rolled into bug 236167, which seems to be stalled (although I've added everything necessary to the tree, as far as I'm aware)...
Comment 3 Stefan Behte (RETIRED) gentoo-dev Security 2008-10-19 11:44:03 UTC 
OK!

*** This bug has been marked as a duplicate of bug 236167 ***