An issue was discovered in open-vm-tools 2009.03.18...
High severity
Unreviewed
Published
Nov 23, 2022
to the GitHub Advisory Database
•
Updated Jan 31, 2023
Description
Published by the National Vulnerability Database
Nov 23, 2022
Published to the GitHub Advisory Database
Nov 23, 2022
Last updated
Jan 31, 2023
An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs (aka hgfsmounter).
References