Unrated severityNVD Advisory· Published Dec 21, 2005· Updated Apr 16, 2026
CVE-2005-4459
CVE-2005-4459
Description
Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands.
Affected products
20cpe:2.3:a:vmware:gsx_server:2.0:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:vmware:gsx_server:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:2.0.1_build_2129:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:2.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:2.5.1_build_5336:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:2.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:3.0_build_7592:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:gsx_server:3.2:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:3.2.1:patch1:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:vmware:workstation:3.2.1:patch1:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:3.4:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:4.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:4.5.2_build_8848:r4:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:5.0.0_build_13124:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:5.5:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
13- secunia.com/advisories/18162nvdPatchVendor Advisory
- www.securityfocus.com/bid/15998nvdPatch
- www.vmware.com/support/kb/enduser/std_adp.phpnvdPatch
- lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.htmlnvdExploit
- secunia.com/advisories/18344nvdVendor Advisory
- www.vupen.com/english/advisories/2005/3013nvdVendor Advisory
- www.kb.cert.org/vuls/id/856689nvdUS Government Resource
- securityreason.com/securityalert/282nvd
- securityreason.com/securityalert/289nvd
- securitytracker.com/idnvd
- www.gentoo.org/security/en/glsa/glsa-200601-04.xmlnvd
- www.securityfocus.com/archive/1/419997/100/0/threadednvd
- www.securityfocus.com/archive/1/420017/100/0/threadednvd
News mentions
0No linked articles in our index yet.