CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 8.3
CWE Name:  Permissions Privileges and Access Controls
Summary: vmware esxi 3.5, 4.0, and 4.1 and esx 3.5, 4.0, and 4.1 do not properly implement port-based i/o operations, which allows guest os users to gain guest os privileges by overwriting memory locations in a read-only memory block associated with the virtual dos machine.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: ADJACENT_NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2012-04-02
Last Modified Date: 2018-10-12