« Volver al listado

CVE-2009-0908

Estado: ModificadaMedia (6.4)—

Unspecified vulnerability in the ACE shared folders implementation in the VMware Host Guest File System (HGFS) shared folders feature in VMware ACE 2.5.1 and earlier allows attackers to enable a disabled shared folder.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Vmware — ACE

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-0908",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-04-06T15:30:04.360",
  "references": [
    {
      "url": "http://lists.vmware.com/pipermail/security-announce/2009/000054.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2009/Apr/0036.html",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/34373",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1021975",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vmware.com/security/advisories/VMSA-2009-0005.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/0944",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6399",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.vmware.com/pipermail/security-announce/2009/000054.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2009/Apr/0036.html",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/34373",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1021975",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vmware.com/security/advisories/VMSA-2009-0005.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/0944",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6399",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in the ACE shared folders implementation in the VMware Host Guest File System (HGFS) shared folders feature in VMware ACE 2.5.1 and earlier allows attackers to enable a disabled shared folder."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en la implementación de la carpeta en VMware Host Guest File System (HGFS) característica de carpeta compartida en VMware ACE v2.5.1 y anteriores que permiten a lo atacantes deshabilitar las carpetas compartidas."
    }
  ],
  "lastModified": "2026-06-16T23:06:04.890",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D249F86-E463-4AB1-BEEE-0828D5A2D761",
              "versionEndIncluding": "2.5.1"
            },
            {
              "criteria": "cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F20A8E8-E07D-41B2-899F-2ABA9DD1C2C6"
            },
            {
              "criteria": "cpe:2.3:a:vmware:ace:1.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "700C0BB4-2272-4405-9D9A-A636E3D22461"
            },
            {
              "criteria": "cpe:2.3:a:vmware:ace:1.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CFC82A8C-E561-4E35-A84D-66A4D6C90264"
            },
            {
              "criteria": "cpe:2.3:a:vmware:ace:1.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2D346E48-887C-4D02-BFD3-D323B7F3871C"
            },
            {
              "criteria": "cpe:2.3:a:vmware:ace:1.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D9C6150A-2DF3-4F7B-B024-0F3DBB686124"
            },
            {
              "criteria": "cpe:2.3:a:vmware:ace:1.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "40192EE1-A300-42C3-BC98-286C9E5A281E"
            },
            {
              "criteria": "cpe:2.3:a:vmware:ace:1.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "87291B27-442C-4CAB-94A1-67FC766486EE"
            },
            {
              "criteria": "cpe:2.3:a:vmware:ace:1.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C4B04862-4377-422E-931A-B17FE1CA1884"
            },
            {
              "criteria": "cpe:2.3:a:vmware:ace:1.0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C35B6730-F05B-4B62-B4DE-07C61A4924F3"
            },
            {
              "criteria": "cpe:2.3:a:vmware:ace:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A8E1A5AA-BD9F-4263-B7C6-E744323C4D74"
            },
            {
              "criteria": "cpe:2.3:a:vmware:ace:2.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D22E40D-C362-49FD-924C-262A64555934"
            },
            {
              "criteria": "cpe:2.3:a:vmware:ace:2.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8A48CEB4-5864-4A0F-B14C-CFE4699C3311"
            },
            {
              "criteria": "cpe:2.3:a:vmware:ace:2.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "78957047-FB9F-4D1D-B3D9-91257A6B4D7C"
            },
            {
              "criteria": "cpe:2.3:a:vmware:ace:2.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5A04DB52-C66C-4AA9-9D6F-9D2DC202C5C0"
            },
            {
              "criteria": "cpe:2.3:a:vmware:ace:2.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "280033C5-90EF-4825-A87D-B23650D8C71A"
            },
            {
              "criteria": "cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B71537AE-346D-4BA9-90E7-EA0AB0CD0886"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}