Stay Secure with the Latest Linux Advisories

security advisorygentoolocal exploit

Gentoo: 200308-03.1 Moderate: Insecure Symlink in VMware

The previous GLSA 200308-03 was wrong when it stated thatvmware-workstation-4.0.1-5289 would fix the problems described in theadvisory.. - - --------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200308-03.1 - - --------------------------------------------------------------------- � � � � � PACKAGE : vmware � � � � � SUMMARY : insecure symbolic links � � � � � � �DATE : 2003-09-01 13:42 UTC � � � � � EXPLOIT : local VERSIONS AFFECTED : =vmware-workstation-4.0.2.5592 � � � � � � � CVE : - - --------------------------------------------------------------------- The previous GLSA 200308-03 was wrong when it stated that vmware-workstation-4.0.1-5289 would fix the problems described in the advisory. SOLUTION It is recommended that all Gentoo Linux users who are running app-emulation/vmware-workstation-4.x upgrade to vmware-workstation-4.0.1-5289 as follows emerge sync emerge \=app-emulation/vmware-workstation/vmware-workstation-4.0.2.5592 emerge clean - - --------------------------------------------------------------------- This email address is being protected from spambots. You need JavaScript enabled to view it. - GnuPG key is available at - - --------------------------------------------------------------------- . Debian alerts users to insecure directory in docker; recommended to patch to mitigate risk of local attacks.. Gentoo Security, Vmware Exploit, Local Threat, Symlink Issue. . LinuxSecurity.com Team

Sep 01, 2003 Gentoo