CVE-2020-3950

Related Files

VMware Fusion USB Arbitrator Setuid Privilege Escalation

Posted Apr 3, 2020

Authored by h00die, Grimm, Rich Mirch, Dhanesh Kizhakkinan, jeffball | Site metasploit.com

This Metasploit module exploits an improper use of setuid binaries within VMware Fusion versions 10.1.3 through 11.5.3. The Open VMware USB Arbitrator Service can be launched outside of its standard path which allows loading of an attacker controlled binary. By creating a payload in the user home directory in a specific folder, and creating a hard link to the Open VMware USB Arbitrator Service binary, we are able to launch it temporarily to start our payload with an effective UID of 0.

tags | exploit

advisories | CVE-2020-3950

SHA-256 | aaad84a1a18f4d6b57a25d43ba08582ab6803df92a1e0f17d5239252a6bec296

Download | Favorite | View

VMware Fusion 11.5.2 Privilege Escalation

Posted Mar 20, 2020

Authored by Rich Mirch

VMware Fusion version 11.5.2 suffers from a privilege escalation vulnerability.

tags | exploit

advisories | CVE-2020-3950

SHA-256 | 32822385cc1b1351b758ce05b377643939170585f3b0702c248db04cba895a0b

Download | Favorite | View