← Database

CVE-2009-1143

HIGH CVSS: 7.0 Published: 2022-11-23 Modified: 2026-06-16

Description

An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs (aka hgfsmounter).

Affected Platforms

Vmware Open-Vm-Tools

Weakness Type

CWE-59, CWE-59

References