CVE-2008-0967

Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMware Player 1.x before 1.0.7 build 91707 and 2.x before 2.0.4 build 93057, and VMware Server before 1.0.6 build 91891 on Linux, and VMware ESXi 3.5 and VMware ESX 2.5.4 through 3.5, allows local users to gain privileges via a library path option in a configuration file.

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=713
• http://secunia.com/advisories/30556Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201209-25.xml
• http://securityreason.com/securityalert/3922
• http://securitytracker.com/id?1020198
• http://www.securityfocus.com/archive/1/493080/100/0/threaded
• http://www.securityfocus.com/bid/29557
• http://www.vmware.com/security/advisories/VMSA-2008-0009.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2008/1744Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42878
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4768
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5583
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=713
• http://secunia.com/advisories/30556Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201209-25.xml
• http://securityreason.com/securityalert/3922
• http://securitytracker.com/id?1020198
• http://www.securityfocus.com/archive/1/493080/100/0/threaded
• http://www.securityfocus.com/bid/29557
• http://www.vmware.com/security/advisories/VMSA-2008-0009.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2008/1744Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42878
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4768
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5583

Published

Jun 5, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0960SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.…
• CVE-2008-0961EMV DiskXtender 6.20.060 has a hard-coded login and password…9.8
• CVE-2008-0962Stack-based buffer overflow in the File System Manager for E…
• CVE-2008-0963Format string vulnerability in EMC DiskXtender MediaStor 6.2…
• CVE-2008-0964Multiple stack-based buffer overflows in snoop on Sun Solari…
• CVE-2008-0965Multiple format string vulnerabilities in snoop on Sun Solar…
• CVE-2008-0971Multiple cross-site scripting (XSS) vulnerabilities in index…
• CVE-2008-0973Buffer overflow in Double-Take (aka HP StorageWorks Storage …
• CVE-2008-0974Double-Take 5.0.0.2865 and earlier, distributed under the HP…
• CVE-2008-0975Double-Take 5.0.0.2865 and earlier, distributed under the HP…
• CVE-2008-0976Double-Take 5.0.0.2865 and earlier, distributed under the HP…
• CVE-2008-0977Double-Take 5.0.0.2865 and earlier, distributed under the HP…