Auth bypass in Apple Mac_os_x
CVE-2010-4296
vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 does not properly load libra…
Vulnerability class: Broken Access Control
EPSS: 0.004 (29.2th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x
- Linux Linux_kernel
- Vmware Fusion — versions 3.1.1, 3.1.2, 3.1
- Vmware Player — versions 3.1.1, 3.1.2, 3.1
- Vmware Server — versions 2.0.2
- Vmware Workstation — versions 7.0, 7.0.1, 7.1.1
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_MLIST, Mailing List)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory, Broken Link)
- cve@mitre.org (x_refsource_SECUNIA, Broken Link, Vendor Advisory, third-party-advisory)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK, Broken Link)
- cve@mitre.org (x_refsource_SECUNIA, Broken Link, Vendor Advisory, third-party-advisory)
- cve@mitre.org (Third Party Advisory, vdb-entry, Broken Link, x_refsource_VUPEN)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK, Broken Link)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
Frequently asked questions
- What is CVE-2010-4296?
- CVE-2010-4296 is a vulnerability in Apple Mac_os_x, classified under Incorrect Authorization. Published 2010-12-06.
- Is CVE-2010-4296 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.