Unrated severityNVD Advisory· Published Dec 21, 2005· Updated Jul 7, 2026
CVE-2005-4459
CVE-2005-4459
Description
Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
24cpe:2.3:a:vmware:gsx_server:2.0.1_build_2129:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:vmware:gsx_server:2.0.1_build_2129:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:2.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:2.5.1_build_5336:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:2.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:3.0_build_7592:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:3.2:*:*:*:*:*:*:*
- (no CPE)range: =3.2
cpe:2.3:a:vmware:workstation:3.2.1:patch1:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:vmware:workstation:3.2.1:patch1:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:3.4:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:4.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:4.5.2_build_8848:r4:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:5.0.0_build_13124:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:5.5:*:*:*:*:*:*:*
- (no CPE)range: =5.5
Patches
Vulnerability mechanics
References
13- secunia.com/advisories/18162nvdPatchVendor Advisory
- www.securityfocus.com/bid/15998nvdPatchBroken Link
- www.vmware.com/support/kb/enduser/std_adp.phpnvdPatchBroken Link
- lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.htmlnvdExploit
- secunia.com/advisories/18344nvdVendor Advisory
- securityreason.com/securityalert/282nvdThird Party Advisory
- securityreason.com/securityalert/289nvdThird Party Advisory
- www.gentoo.org/security/en/glsa/glsa-200601-04.xmlnvdThird Party Advisory
- securitytracker.com/idnvdPermissions Required
- www.kb.cert.org/vuls/id/856689nvdUS Government Resource
- www.securityfocus.com/archive/1/419997/100/0/threadednvdBroken Link
- www.securityfocus.com/archive/1/420017/100/0/threadednvdBroken Link
- www.vupen.com/english/advisories/2005/3013nvdURL Repurposed
News mentions
0No linked articles in our index yet.