Bugtraq mailing list archives

Re: vmware bug?


From: KF <dotslash () snosoft com>
Date: Mon, 30 Jul 2001 04:57:14 -0400

Theres all kinds of stuff that goes in /tmp when vmware runs... like
nvram settings for example. I have tried a few symlink style attacks but
vmware seems to check before writing in most cases. I can However see
your license info being something "sensitive" that you wouldn't want to
share.
-KF

starman jones wrote:

oi oi.. i recently installed vmware (the latest release of the workstation
thing) and it crashed once or twice. But never mind that. in /tmp i found
a file called vmware-log.starman. starman being my user on the box. Inside
in this file is my license information and it's chmod is 777. That's kinda
nasty don't ya think? has anyone seen similar things?
lates
sj


Current thread: