Title : VMware NAT Networking FTP Commands Buffer Overflow Vulnerability VUPEN ID : VUPEN/ADV-2005-3013 CVE ID : CVE-2005-4459
Rated as : High Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2005-12-21
Technical Description
A vulnerability has been identified in VMware, which could be exploited by remote attackers to execute arbitrary commands or cause a denial of service. This flaw is due to a heap overflow error in "vmnat.exe" (Windows) and "vmnet-natd" (Linux) when processing malformed FTP commands (e.g. EPRT or PORT), which could be exploited by remote attackers to take complete control of an affected system where the NAT networking is enabled on the virtual machine.
