多个VMware产品本地权限提升漏洞(CVE-2013-3519)

多个VMware产品本地权限提升漏洞(CVE-2013-3519)

发布日期：2013-12-04
更新日期：2013-12-05

受影响系统：
VMWare ESXi 5.x
VMWare ESXi 4.x
描述：
--------------------------------------------------------------------------------
BUGTRAQ  ID: 64075
CVE(CAN) ID: CVE-2013-3519

VMWare是一个“虚拟PC”软件，可以在一台机器上同时运行二个或更多Windows、DOS、LINUX系统。

VMware Workstation 9.0.3之前版本, VMware Player 5.0.3之前版本, VMware Fusion 5.0.4之前版本, VMware ESXi 4.0-5.1, VMware ESX 4.0、4.1内的lgtosync.sys，在使用32位的Windows客户端OS后，允许客户端OS用户通过执行特殊内存分配的应用获取客户端OS权限。

<*来源：Derek Soeder （dsoeder@eeye.com）
 
  链接：http://www.vmware.com/security/advisories/VMSA-2013-0014.html
*>

建议：
--------------------------------------------------------------------------------
厂商补丁：

VMWare
------
VMWare已经为此发布了一个安全公告（VMSA-2013-0014）以及相应补丁:
VMSA-2013-0014：VMware Workstation, Fusion, ESXi and ESX patches address a guest privilege escalation - See more at: http://www.vmware.com/security/advisories/VMSA-2013-0014.html#sthash.idKAduvQ.dpuf
链接：http://www.vmware.com/security/advisories/VMSA-2013-0014.html

补丁下载：
VMware Workstation 
---------------------------
https://www.vmware.com/go/downloadworkstation

VMware Player
---------------------------
https://www.vmware.com/go/downloadplayer

VMware Fusion
---------------------------
https://www.vmware.com/go/downloadfusion

ESXi and ESX
---------------------------
https://my.vmware.com/web/vmware/downloads

ESXi 5.1
---------------------------
File: update-from-esxi5.1-5.1_update01.zip
md5sum: 28b8026bcfbe3cd1817509759d4b61d6
sha1sum: 9d3124d3c5efa6d0c3b9ba06511243fc6e205542
http://kb.vmware.com/kb/2041632
update-from-esxi5.1-5.1_update01.zip contains ESXi510-201304102-SG

ESXi 5.0
---------------------------
File: ESXi500-201303001.zip
md5sum: c62470c48e81da84891c79d5533c8e91
sha1sum: 69fe8933888d2a6c4e53cfe822441c963bdcd2c7
http://kb.vmware.com/kb/2044373
ESXi500-201303001.zip contains ESXi500-201303102-SG

ESXi 4.1
---------------------------
File: ESXi410-201301001.zip
md5sum: 2fce8e96048b5f80354e90a1b9e7776c
sha1sum: d38283afafe7e27fc64f11cf780e0f1577f98c6c
http://kb.vmware.com/kb/2041332
ESXi410-201301001 contains ESXi410-201301402-BG

ESXi 4.0
---------------------------
File: ESXi400-201305001.zip
md5sum: 065d3fa4b0f52dd38c2bd92e5bfc5580
sha1sum: 1f3cab25a144746372d86071a47e569c439e276a
http://kb.vmware.com/kb/2044241
ESXi400-201305001 contains ESXi400-201305401-SG

ESX 4.1
---------------------------
File: ESX410-201301001.zip
md5sum: a8685fff822d6fd2d112db20f223d8fd
sha1sum: 4f5e6d0d11c5666bcf7488b0a970e052c77c73f0
http://kb.vmware.com/kb/2041331
ESX410-201301001 contains ESX410-201301401-SG

ESX 4.0
---------------------------
File: ESX400-201305001.zip
md5sum: c9ac91d3d803c7b7cb9df401c20b91c0
sha1sum: 7f5cef274c709248daa56d8c0e6fcc1ba86ae411
http://kb.vmware.com/kb/2044240
ESX400-201305001 contains ESX400-201305401-SG - See more at: http://www.vmware.com/security/advisories/VMSA-2013-0014.html#sthash.idKAduvQ.dpuf