CVE-2010-4295

Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via vectors involving temporary files.

• CWE-362

• http://lists.vmware.com/pipermail/security-announce/2010/000112.htmlMailing List, Vendor Advisory
• http://osvdb.org/69585Broken Link
• http://secunia.com/advisories/42453Broken Link, Vendor Advisory
• http://secunia.com/advisories/42482Broken Link, Vendor Advisory
• http://www.securityfocus.com/archive/1/514995/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/45167Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1024819Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1024820Broken Link, Third Party Advisory, VDB Entry
• http://www.vmware.com/security/advisories/VMSA-2010-0018.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2010/3116Broken Link, Vendor Advisory
• http://lists.vmware.com/pipermail/security-announce/2010/000112.htmlMailing List, Vendor Advisory
• http://osvdb.org/69585Broken Link
• http://secunia.com/advisories/42453Broken Link, Vendor Advisory
• http://secunia.com/advisories/42482Broken Link, Vendor Advisory
• http://www.securityfocus.com/archive/1/514995/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/45167Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1024819Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1024820Broken Link, Third Party Advisory, VDB Entry
• http://www.vmware.com/security/advisories/VMSA-2010-0018.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2010/3116Broken Link, Vendor Advisory

Published

Dec 6, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4289Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4290Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4291Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4292Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4293Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4294The frame decompression functionality in the VMnc media code…
• CVE-2010-4296vmware-mount in VMware Workstation 7.x before 7.1.2 build 30…
• CVE-2010-4297The VMware Tools update functionality in VMware Workstation …
• CVE-2010-4298SQL injection vulnerability in the download module in Free S…
• CVE-2010-4299Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenwork…
• CVE-2010-4300Heap-based buffer overflow in the dissect_ldss_transfer func…
• CVE-2010-4301epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissecto…