CVE-2009-1143
An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended...
An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs (aka hgfsmounter).
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs (aka hgfsmounter).
- Record
CVE-2009-1143- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List
An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs (aka hgfsmounter).
- Record
CVE-2009-1143- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-59
- Updated
- 2026-11-02
EUVDEUVD-2009-1144
An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs (aka hgfsmounter).
- Record
EUVD-2009-1144- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-29j9-2p84-4f27
An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended...
An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs (aka hgfsmounter).
- Record
GHSA-29j9-2p84-4f27- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-59
- Updated
- 2026-11-02
OSV
An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs (aka hgfsmounter).
- Record
CVE-2009-1143- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-1143
An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs (aka hgfsmounter).
- Record
DEBIAN-CVE-2009-1143- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2009-1143
An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs (aka hgfsmounter).
- Record
UBUNTU-CVE-2009-1143- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
open-vm-toolsDebian:12 |
before 2:12.0.0-1 | 2:12.0.0-1 |
open-vm-toolsDebian:13 |
before 2:12.0.0-1 | 2:12.0.0-1 |
open-vm-toolsDebian:14 |
before 2:12.0.0-1 | 2:12.0.0-1 |
open-vm-toolsUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 2013.09.16-1328054-0ubuntu12013.09.16-1328054-0ubuntu22013.09.16-1328054-0ubuntu42013.09.16-1328054-0ubuntu52013.09.16-1328054-0ubuntu6 Show 9 moreShow less2:9.4.0-1280544-52:9.4.0-1280544-5ubuntu12:9.4.0-1280544-5ubuntu22:9.4.0-1280544-5ubuntu42:9.4.0-1280544-5ubuntu52:9.4.0-1280544-5ubuntu62:9.4.0-1280544-5ubuntu6.22:9.4.0-1280544-5ubuntu6.42:9.4.0-1280544-5ubuntu6.4+esm1 |
None known |
open-vm-toolsUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2:9.10.2-2822639-1ubuntu32:10.0.0-3000743-3ubuntu12:10.0.7-3227872-2ubuntu12:10.0.7-3227872-5ubuntu1~16.04.12:10.0.7-3227872-5ubuntu1~16.04.2 Show 6 moreShow less2:10.2.0-3~ubuntu0.16.04.12:10.2.0-3~ubuntu0.16.04.1+esm12:10.2.0-3~ubuntu0.16.04.1+esm22:10.2.0-3~ubuntu0.16.04.1+esm32:10.2.0-3~ubuntu0.16.04.1+esm42:10.2.0-3~ubuntu0.16.04.1+esm5 |
None known |
open-vm-toolsUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2:10.1.10-32:10.1.10-3build12:10.1.15-12:10.1.15-1build12:10.2.0-2 Show 18 moreShow less2:10.2.0-2build12:10.2.0-32:10.2.0-3ubuntu12:10.2.0-3ubuntu22:10.2.0-3ubuntu32:10.3.0-0ubuntu1~18.04.12:10.3.0-0ubuntu1~18.04.22:10.3.0-0ubuntu1~18.04.32:10.3.5-7~ubuntu0.18.04.12:10.3.10-1~ubuntu0.18.04.12:11.0.1-2ubuntu0.18.04.22:11.0.5-4ubuntu0.18.04.12:11.0.5-4ubuntu0.18.04.22:11.0.5-4ubuntu0.18.04.32:11.0.5-4ubuntu0.18.04.3+esm12:11.0.5-4ubuntu0.18.04.3+esm22:11.0.5-4ubuntu0.18.04.3+esm32:11.0.5-4ubuntu0.18.04.3+esm4 |
None known |
open-vm-toolsUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 2:10.3.10-3ubuntu12:11.0.1-22:11.0.1-32:11.0.1-3ubuntu12:11.0.1-4 Show 16 moreShow less2:11.0.5-12:11.0.5-22:11.0.5-32:11.0.5-42:11.1.0-2~ubuntu20.04.12:11.1.5-1~ubuntu20.04.22:11.2.5-2ubuntu1~ubuntu20.04.12:11.3.0-2ubuntu0~ubuntu20.04.12:11.3.0-2ubuntu0~ubuntu20.04.22:11.3.0-2ubuntu0~ubuntu20.04.32:11.3.0-2ubuntu0~ubuntu20.04.42:11.3.0-2ubuntu0~ubuntu20.04.52:11.3.0-2ubuntu0~ubuntu20.04.62:11.3.0-2ubuntu0~ubuntu20.04.72:11.3.0-2ubuntu0~ubuntu20.04.82:11.3.0-2ubuntu0~ubuntu20.04.8+esm1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-1143 is a high vulnerability (CVSS 7.0) in Vmware Open-vm-tools, published November 23, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.27%, the 19th percentile. Fixed in open-vm-tools 2:12.0.0-1.