CVE-2005-4459

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 14.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-21 · updated 2026-07-07
Weakness: CWE-119

Description

Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands.

Affected products

VMware Ace: 1.0.1
VMware Gsx Server: 2.0, 2.0.1_build_2129, 2.5.1, 2.5.1_build_5336, 2.5.2, 3.0 (+3)
VMware Player: 1.0.0
VMware Workstation: 3.2.1-patch1, 3.4, 4.0, 4.0.1, 4.0.2, 4.5.2 (+3)

References

http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.html
http://secunia.com/advisories/18162
http://secunia.com/advisories/18344
http://securityreason.com/securityalert/282
http://securityreason.com/securityalert/289
http://securitytracker.com/id?1015401
http://www.gentoo.org/security/en/glsa/glsa-200601-04.xml
http://www.kb.cert.org/vuls/id/856689
http://www.securityfocus.com/archive/1/419997/100/0/threaded
http://www.securityfocus.com/archive/1/420017/100/0/threaded
http://www.securityfocus.com/bid/15998
http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2000

Get alerted when CVE-2005-4459 or the next vulnerability affects your stack