CVE-2005-4459

Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands.

• CWE-119

• http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.htmlExploit
• http://secunia.com/advisories/18162Patch, Vendor Advisory
• http://secunia.com/advisories/18344Vendor Advisory
• http://securityreason.com/securityalert/282Third Party Advisory
• http://securityreason.com/securityalert/289Third Party Advisory
• http://securitytracker.com/id?1015401Permissions Required
• http://www.gentoo.org/security/en/glsa/glsa-200601-04.xmlThird Party Advisory
• http://www.kb.cert.org/vuls/id/856689US Government Resource
• http://www.securityfocus.com/archive/1/419997/100/0/threadedBroken Link
• http://www.securityfocus.com/archive/1/420017/100/0/threadedBroken Link
• http://www.securityfocus.com/bid/15998Patch, Broken Link
• http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2000Patch, Broken Link
• http://www.vupen.com/english/advisories/2005/3013URL Repurposed
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.htmlExploit
• http://secunia.com/advisories/18162Patch, Vendor Advisory
• http://secunia.com/advisories/18344Vendor Advisory
• http://securityreason.com/securityalert/282Third Party Advisory
• http://securityreason.com/securityalert/289Third Party Advisory
• http://securitytracker.com/id?1015401Permissions Required
• http://www.gentoo.org/security/en/glsa/glsa-200601-04.xmlThird Party Advisory
• http://www.kb.cert.org/vuls/id/856689US Government Resource
• http://www.securityfocus.com/archive/1/419997/100/0/threadedBroken Link
• http://www.securityfocus.com/archive/1/420017/100/0/threadedBroken Link
• http://www.securityfocus.com/bid/15998Patch, Broken Link
• http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2000Patch, Broken Link
• http://www.vupen.com/english/advisories/2005/3013URL Repurposed

Published

Dec 21, 2005

Last Modified

Jul 7, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-4453UserProfile.cs in Ultraapps Issue Manager before 2.1 allows …
• CVE-2005-4454Validate-before-filter vulnerability in cleanhtml.pl 1.129 i…
• CVE-2005-4455cleanhtml.pl 1.129 in LiveJournal CVS before Dec 13 2005 all…
• CVE-2005-4456Multiple buffer overflows in MailEnable Professional 1.71 an…
• CVE-2005-4457MailEnable Enterprise 1.1 before patch ME-10009 allows remot…
• CVE-2005-4458Group.pm in Metadot Portal Server 6.4.4 and earlier does not…
• CVE-2005-4460Cross-site scripting (XSS) vulnerability in Beehive Forum 0.…
• CVE-2005-4461SQL injection vulnerability in index.php in Beehive Forum 0.…
• CVE-2005-4462PHP remote file include vulnerability in usermods.php in Tol…
• CVE-2005-4463WordPress before 1.5.2 allows remote attackers to obtain sen…
• CVE-2005-4464Ingate Firewall before 4.3.4 and SIParator before 4.3.4 allo…
• CVE-2005-4465The Internet Key Exchange version 1 (IKEv1) implementation i…