Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-0177


vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Player 2.5.1 build 126130, 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 2.0.x before 2.0.1 build 156745; and VMware Fusion before 2.0.2 build 147997 allows remote attackers to cause a denial of service (daemon crash) via a long (1) USER or (2) PASS command.


Published

2009-01-20T16:00:09.030

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-399

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application vmware ace ≤ 2.5.1 Yes
Application vmware ace 2.5.0 Yes
Application vmware fusion ≤ 2.0.1 Yes
Application vmware server 2.0.0 Yes
Application vmware vmware_player ≤ 2.5.1 Yes
Application vmware vmware_player 1.0.0 Yes
Application vmware vmware_player 1.0.1 Yes
Application vmware vmware_player 1.0.2 Yes
Application vmware vmware_player 1.0.3 Yes
Application vmware vmware_player 1.0.4 Yes
Application vmware vmware_player 1.0.6 Yes
Application vmware vmware_player 1.0.7 Yes
Application vmware vmware_player 1.0.8 Yes
Application vmware vmware_player 1.0.9 Yes
Application vmware vmware_player 1.05 Yes
Application vmware vmware_player 2.0 Yes
Application vmware vmware_player 2.0.1 Yes
Application vmware vmware_player 2.0.2 Yes
Application vmware vmware_player 2.0.3 Yes
Application vmware vmware_player 2.0.4 Yes
Application vmware vmware_player 2.0.5 Yes
Application vmware vmware_player 2.5 Yes
Application vmware vmware_workstation ≤ 6.51 Yes
Application vmware vmware_workstation 4.5.3 Yes
Application vmware vmware_workstation 5.0 Yes
Application vmware vmware_workstation 5.5.0 Yes
Application vmware vmware_workstation 5.5.1 Yes
Application vmware vmware_workstation 5.5.2 Yes
Application vmware vmware_workstation 5.5.3 Yes
Application vmware vmware_workstation 5.5.4 Yes
Application vmware vmware_workstation 5.5.5 Yes
Application vmware vmware_workstation 5.5.6 Yes
Application vmware vmware_workstation 5.5.7 Yes
Application vmware vmware_workstation 5.5.8 Yes
Application vmware vmware_workstation 6.0 Yes
Application vmware vmware_workstation 6.0.1 Yes
Application vmware vmware_workstation 6.0.2 Yes
Application vmware vmware_workstation 6.0.3 Yes
Application vmware vmware_workstation 6.0.4 Yes
Application vmware vmware_workstation 6.0.5 Yes
Application vmware vmware_workstation 6.5 Yes

References