What’s Vulnerable › Vulnerabilities

CVE-2008-0967

• Severity: medium (CVSS 6.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-06-05 · updated 2026-06-16

Description

Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMware Player 1.x before 1.0.7 build 91707 and 2.x before 2.0.4 build 93057, and VMware Server before 1.0.6 build 91891 on Linux, and VMware ESXi 3.5 and VMware ESX 2.5.4 through 3.5, allows local users to gain privileges via a library path option in a configuration file.

Affected products

• VMware ESX: 3.0.0, 3.0.1, 3.0.2
• VMware Esx Server: 2.5.5, 3.1, 3.2, 3.3, 3.5
• VMware ESXi: 3.5
• VMware Player: 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5 (+5)
• VMware Server: 1.0.3
• Vmware Server: 1.0.0, 1.0.1, 1.0.2, 1.0.4, 1.0.5
• Vmware Workstation: 5.5.0, 5.5.2, 5.5.5, 5.5.6, 6.0.1, 6.0.2 (+1)
• VMware Workstation: 5.5.1, 5.5.3, 5.5.4, 6.0

References

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=713
• http://secunia.com/advisories/30556
• http://security.gentoo.org/glsa/glsa-201209-25.xml
• http://securityreason.com/securityalert/3922
• http://securitytracker.com/id?1020198
• http://www.securityfocus.com/archive/1/493080/100/0/threaded
• http://www.securityfocus.com/bid/29557
• http://www.vmware.com/security/advisories/VMSA-2008-0009.html
• http://www.vupen.com/english/advisories/2008/1744
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42878
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4768
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5583

Get alerted when CVE-2008-0967 or the next vulnerability affects your stack