The host is installed with VMWare product(s) that are vulnerable to Denial of Service vulnerability.

Successful exploitation will let the attacker deny virtual machines access to local users. Impact Level : Application

Solution/Patch not available as on 4th February 2009. For further updates refer the below URLs. http://www.vmware.com/download/ws http://www.vmware.com/download/player

VMware product(s) throws an error in the vmware-authd daemon when processing overly long strings. This will terminate the vmware-authd process via an overly long 'USER' or 'PASS' strings sent to TCP port 912.

VMware Player version 2.5.1 or prior on Windows. VMware Workstation version 6.5.1 or prior on Windows.

• http://osvdb.org/51180
• http://secunia.com/advisories/33372
• http://securitytracker.com/alerts/2009/Jan/1021512.html
• http://www.vupen.com/english/advisories/2009/0024

---

Updated on 2017-03-28