Important VMWare Security Exploit
Core Security has the full report but if your using VMWare Workstation, Player, or ACE on Windows there is a security exploit in the shared folders feature that allows a traversing of folders not being shared. According to VMWare until a patch is release there is this workaround.
To disable shared folders in the Global settings:
- From the VMware product’s menu, choose Edit > Preferences.
- In the Workspace tab, under Virtual Machines, deselect the checkbox for Enable all shared folders by default.
To disable shared folders for the individual virtual machine settings:
- From the VMware product’s menu, choose VM > Settings.
- In the Options tab, select Shared Folders and Disable.
Monday, March 3rd 2008 at 2:25 am
It could be worse, at least there’s a workaround. It is still no good though. I’m waiting for MS Hyper-V to come along and eat VMWare’s lunch.