<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">CVE-2011-1787</DocumentTitle>
  <DocumentType>SUSE CVE</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE CVE-2011-1787</ID>
    </Identification>
    <Status>Interim</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>19</Number>
        <Date>2023-12-08T03:01:10Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2021-05-30T12:57:29Z</InitialReleaseDate>
    <CurrentReleaseDate>2023-12-08T03:01:10Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf-cve.pl</Engine>
      <Date>2020-12-27T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="CVE" Type="Summary" Ordinal="1" xml:lang="en">CVE-2011-1787</Note>
    <Note Title="Mitre CVE Description" Type="Description" Ordinal="2" xml:lang="en">Race condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to gain privileges on the guest OS by mounting a filesystem on top of an arbitrary directory.</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="4" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
  </DocumentNotes>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Performance Computing 15-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise High Performance Computing 15-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-LTSS" CPE="cpe:/o:suse:sle_hpc-ltss:15">SUSE Linux Enterprise High Performance Computing 15-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 11 SP4 LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 11 SP4 LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4 LTSS" CPE="cpe:/o:suse:suse_sles_ltss:11:sp4">SUSE Linux Enterprise Server 11 SP4 LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15-ESPOS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 15-ESPOS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 15-ESPOS" CPE="cpe:/o:suse:sle_hpc-espos:15">SUSE Linux Enterprise Server 15-ESPOS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 15-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 15-LTSS" CPE="cpe:/o:suse:sles-ltss:15">SUSE Linux Enterprise Server 15-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 15">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 15">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15" CPE="cpe:/o:suse:sles_sap:15">SUSE Linux Enterprise Server for SAP Applications 15</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="libvmtools-devel">
      <FullProductName ProductID="libvmtools-devel">libvmtools-devel</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libvmtools0">
      <FullProductName ProductID="libvmtools0">libvmtools0</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="open-vm-tools">
      <FullProductName ProductID="open-vm-tools" CPE="cpe:2.3:a:vmware:open-vm-tools:*:*:*:*:*:*:*:*">open-vm-tools</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="open-vm-tools-desktop">
      <FullProductName ProductID="open-vm-tools-desktop">open-vm-tools-desktop</FullProductName>
    </Branch>
    <Relationship ProductReference="libvmtools-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-LTSS:libvmtools-devel">libvmtools-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libvmtools0" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-LTSS:libvmtools0">libvmtools0 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="open-vm-tools" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-LTSS:open-vm-tools">open-vm-tools as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="open-vm-tools-desktop" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15-LTSS:open-vm-tools-desktop">open-vm-tools-desktop as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="open-vm-tools" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4 LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4 LTSS:open-vm-tools">open-vm-tools as a component of SUSE Linux Enterprise Server 11 SP4 LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="open-vm-tools" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15-ESPOS:open-vm-tools">open-vm-tools as a component of SUSE Linux Enterprise Server 15-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libvmtools-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15-LTSS:libvmtools-devel">libvmtools-devel as a component of SUSE Linux Enterprise Server 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libvmtools0" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15-LTSS:libvmtools0">libvmtools0 as a component of SUSE Linux Enterprise Server 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="open-vm-tools" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15-LTSS:open-vm-tools">open-vm-tools as a component of SUSE Linux Enterprise Server 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="open-vm-tools-desktop" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15-LTSS:open-vm-tools-desktop">open-vm-tools-desktop as a component of SUSE Linux Enterprise Server 15-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libvmtools-devel" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15:libvmtools-devel">libvmtools-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="libvmtools0" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15:libvmtools0">libvmtools0 as a component of SUSE Linux Enterprise Server for SAP Applications 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="open-vm-tools" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15:open-vm-tools">open-vm-tools as a component of SUSE Linux Enterprise Server for SAP Applications 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="open-vm-tools-desktop" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15:open-vm-tools-desktop">open-vm-tools-desktop as a component of SUSE Linux Enterprise Server for SAP Applications 15</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Race condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to gain privileges on the guest OS by mounting a filesystem on top of an arbitrary directory.</Note>
    </Notes>
    <CVE>CVE-2011-1787</CVE>
    <ProductStatuses>
      <Status Type="Known Not Affected">
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:libvmtools-devel</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:libvmtools0</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:open-vm-tools</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15-LTSS:open-vm-tools-desktop</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4 LTSS:open-vm-tools</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-ESPOS:open-vm-tools</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:libvmtools-devel</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:libvmtools0</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:open-vm-tools</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15-LTSS:open-vm-tools-desktop</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:libvmtools-devel</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:libvmtools0</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:open-vm-tools</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15:open-vm-tools-desktop</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.9</BaseScoreV2>
        <VectorV2>AV:L/AC:M/Au:N/C:C/I:C/A:C</VectorV2>
      </ScoreSetV2>
    </CVSSScoreSets>
  </Vulnerability>
</cvrfdoc>
