Secunia

Some vulnerabilities have been reported in multiple VMware Products, which can be exploited by malicious, local users to bypass certain security restrictions or to gain escalated privileges.

1) An error exists in the "HGFS.sys" driver included in the VMware Tools package. This can be exploited to execute arbitrary code with escalated privileges on a Windows guest machine.

2) An error in "vmware-authd" can be exploited to gain escalated privileges on a Linux host machine.

For more information see vulnerability #3 in:
SA30476

3) An error within the processing of "Content-Length" headers in the Openwsman management service can be exploited to gain "root" privileges.

4) Multiple boundary errors in the VMware VIX API can be exploited to cause buffer overflows.

For more information see vulnerability #4 in:
SA30476

Please see vendor's advisory for a list of affected products and versions.

Solution
Update to the latest version or apply patches.
Further details available in Customer Area

Provided and/or discovered by
1) Stephen Fewer of Harmony, reported via iDefense
2) Discovered by an anonymous researcher, reported via iDefense.
3) Alexander Sotirov, VMware Security Research
4) Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
VMware:
http://www.vmware.com/security/advisories/VMSA-2008-0009.html

iDefense:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=712
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=713

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area