CVE:CVE-2008-1361
CNNVD:CNNVD-200803-319
VMware Server是一款简单易用的服务器虚拟工具。
VMware Server中存在多个安全漏洞，允许恶意的本地用户获得权限提升或导致拒绝服务。
恶意的Windows用户可以通过导致authd进程连接到打开的受恶意用户控制的命名管道获得LocalSystem权限，还可能利用不安全的命名管道对象获得权限提升或导致拒绝服务。
solution:Upgrade vmware ace to a higher version than 1.0,1.0.1,1.0.2,1.0.3,1.0.4,2.0,and avoid the version 1.0,1.0.1,1.0.2,1.0.3,1.0.4,2.0; Upgrade vmware player to a higher version than 1.0.2,1.0.3,1.0.4,1.0.5,2.0,2.0.1,2.0.2,and avoid the version 1.0.2,1.0.3,1.0.4,1.0.5,2.0,2.0.1,2.0.2; Upgrade vmware server to a higher version than 1.0.3,and avoid the version 1.0.3; Upgrade vmware vmware_server to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.0.4; Upgrade vmware vmware_workstation to a higher version than 5.5.5,6.0.1,6.0.2,and avoid the version 5.5.5,6.0.1,6.0.2; Upgrade vmware workstation to a higher version than 5.5,5.5.3_build_34685,5.5.3_build_42958,5.5.4,5.5.4_build_44386,6.0,and avoid the version 5.5,5.5.3_build_34685,5.5.3_build_42958,5.5.4,5.5.4_build_44386,6.0