CVE-2005-4459
Published · Updated
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 14%
exploitation probability
14%top 3% of all CVEs
observed exploitation
nono source reports it
Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands.
Affected products
n/a · n/aReferences
http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.htmlhttp://secunia.com/advisories/18162http://secunia.com/advisories/18344http://securityreason.com/securityalert/282http://securityreason.com/securityalert/289http://securitytracker.com/id?1015401http://www.gentoo.org/security/en/glsa/glsa-200601-04.xmlhttp://www.kb.cert.org/vuls/id/856689http://www.securityfocus.com/archive/1/419997/100/0/threadedhttp://www.securityfocus.com/archive/1/420017/100/0/threadedhttp://www.securityfocus.com/bid/15998http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2000