| Name | CVE-2011-2145 |
| Description | mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1, when a Solaris or FreeBSD guest OS is used, allows guest OS users to modify arbitrary guest OS files via unspecified vectors, related to a "procedural error." |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| Debian Bugs | 631508 |
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|---|---|---|
| open-vm-tools (PTS) | buster | 2:10.3.10-1+deb10u2 | fixed |
| buster (security) | 2:10.3.10-1+deb10u6 | fixed | |
| bullseye | 2:11.2.5-2+deb11u2 | fixed | |
| bullseye (security) | 2:11.2.5-2+deb11u3 | fixed | |
| bookworm | 2:12.2.0-1+deb12u1 | fixed | |
| bookworm (security) | 2:12.2.0-1+deb12u2 | fixed | |
| sid, trixie | 2:12.3.5-3 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| open-vm-tools | source | (unstable) | 2:8.4.2+2011.08.21-471295-1 | 631508 |
[lenny] - open-vm-tools <no-dsa> (Contrib not supported)
[squeeze] - open-vm-tools <no-dsa> (Contrib not supported)