[22018] in bugtraq
Re: vmware bug?
daemon@ATHENA.MIT.EDU (KF)
Mon Jul 30 18:08:55 2001
Message-ID: <3B65216A.F705EE1E@snosoft.com>
Date: Mon, 30 Jul 2001 04:57:14 -0400
From: KF <dotslash@snosoft.com>
MIME-Version: 1.0
To: starman jones <sj@balrog.neuropunks.org>
Cc: bugtraq@securityfocus.com
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Theres all kinds of stuff that goes in /tmp when vmware runs... like
nvram settings for example. I have tried a few symlink style attacks but
vmware seems to check before writing in most cases. I can However see
your license info being something "sensitive" that you wouldn't want to
share.
-KF
starman jones wrote:
>
> oi oi.. i recently installed vmware (the latest release of the workstation
> thing) and it crashed once or twice. But never mind that. in /tmp i found
> a file called vmware-log.starman. starman being my user on the box. Inside
> in this file is my license information and it's chmod is 777. That's kinda
> nasty don't ya think? has anyone seen similar things?
> lates
> sj
