Unrated severityNVD Advisory· Published Dec 21, 2005· Updated Jun 16, 2026
CVE-2005-4459
CVE-2005-4459
Description
Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
24cpe:2.3:a:vmware:gsx_server:2.0:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:vmware:gsx_server:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:2.0.1_build_2129:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:2.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:2.5.1_build_5336:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:2.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:3.0_build_7592:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:3.2:*:*:*:*:*:*:*
- (no CPE)range: =3.2
cpe:2.3:a:vmware:workstation:3.2.1:patch1:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:vmware:workstation:3.2.1:patch1:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:3.4:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:4.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:4.5.2_build_8848:r4:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:5.0.0_build_13124:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:5.5:*:*:*:*:*:*:*
- (no CPE)range: =5.5
Patches
Vulnerability mechanics
References
13- secunia.com/advisories/18162nvdPatchVendor Advisory
- www.securityfocus.com/bid/15998nvdPatch
- www.vmware.com/support/kb/enduser/std_adp.phpnvdPatch
- lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.htmlnvdExploit
- secunia.com/advisories/18344nvdVendor Advisory
- www.vupen.com/english/advisories/2005/3013nvdVendor Advisory
- www.kb.cert.org/vuls/id/856689nvdUS Government Resource
- securityreason.com/securityalert/282nvd
- securityreason.com/securityalert/289nvd
- securitytracker.com/idnvd
- www.gentoo.org/security/en/glsa/glsa-200601-04.xmlnvd
- www.securityfocus.com/archive/1/419997/100/0/threadednvd
- www.securityfocus.com/archive/1/420017/100/0/threadednvd
News mentions
0No linked articles in our index yet.