Classic tech archive.
From the original averyjparker.com tech blog — historical context; pair with modern guides where noted.
Full archive · Maker projects ·
Network Ninja
Classic tip · Classic
Wow serious VMWare vulnerability HOST system infection
A flaw in vmware could allow malicious code to be run on the host machine according to Sunbeltblog and citing VMWare's knowledge base. This is pretty big since this is something that's not considered…
A flaw in vmware could allow malicious code to be run on the host machine according to Sunbeltblog and citing VMWare's knowledge base. This is pretty big since this is something that's not considered as a threat. (Many people use vmware and other virtual machines for malware/virus/spyware investigations because they're supposed to be isolated from the host machine.)
A vulnerability has been discovered in vmnat.exe on Windows hosts and vmnet-natd on Linux systems. The vulnerability in this component affects VMware Workstation 5.5, VMware GSX Server 3.2, VMware ACE 1.0.1, VMware Player 1.0, and previous releases of these products. The vulnerability makes it possible for a malicious guest using a NAT networking configuration to execute unwanted code on the host machine.It even affects the recent vmware player as noted above.
VMware believes that the vulnerability is very serious and recommends that affected users update their products to the new releases available at www.vmware.com/download or change the configuration of the virtual machine so it does not use NAT networking.