Description: Nick Brees has reported a vulnerability in VMware, which potentially can be exploited by malicious, local users to gain knowledge of sensitive information.
The problem is caused due to missing return code checks of the "chmod()" call in vmware-config.pl when setting permissions for SSL key files. This may potentially result in insecure read permissions being set on the key file.
Solution: The vendor recommends to changing the file permissions (see vendor advisory).
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
