Insecure Temporary File The advisory has been revoked - it doesn't affect any version of package open-vm-tools-test  (opens in a new tab)


Threat Intelligence

EPSS
0.43% (36th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CENTOS7-OPENVMTOOLSTEST-1940240
  • published26 Jul 2021
  • disclosed26 Aug 2014

Introduced: 26 Aug 2014

CVE-2014-4199  (opens in a new tab)
CWE-377  (opens in a new tab)

Amendment

The Centos security team deemed this advisory irrelevant for Centos:7.

NVD Description

Note: Versions mentioned in the description apply only to the upstream open-vm-tools-test package and not the open-vm-tools-test package as distributed by Centos.

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.