{"id":"CVE-2008-1392","aliases":["EUVD-2008-1399","GHSA-74vx-v5xg-4w53"],"status":"published","title":"The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and...","description":"The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS accessible through anonymous VIX API calls, which has unknown impact and attack vectors.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02734,"percentile":0.86193,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-16"],"published":"2008-03-20T00:00:00Z","modified":"2026-06-16T22:51:39Z","products":[{"vendor":"vmware","product":"ace"},{"vendor":"vmware","product":"player"},{"vendor":"vmware","product":"vmware_workstation"}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://securityreason.com/securityalert/3755","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41551","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28276","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-1392"},{"url":"https://github.com/advisories/GHSA-74vx-v5xg-4w53"}],"sources":{"cve":[{"id":"CVE-2008-1392","description":"The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS accessible through anonymous VIX API calls, which has unknown impact and attack vectors.","status":"published","published":"2008-03-20T00:00:00Z","modified":"2024-08-07T08:17:34.739Z","updated_at":"2026-11-02T14:34:48.103804Z"}],"euvd":[{"id":"EUVD-2008-1399","description":"The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS accessible through anonymous VIX API calls, which has unknown impact and attack vectors.","status":"published","published":"2008-03-20T00:00:00Z","modified":"2024-08-07T08:17:34Z","updated_at":"2026-11-03T01:39:01.686266Z"}],"ghsa":[{"id":"GHSA-74vx-v5xg-4w53","title":"The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and...","description":"The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS accessible through anonymous VIX API calls, which has unknown impact and attack vectors.","status":"published","published":"2022-05-01T23:39:37Z","modified":"2023-01-31T05:06:02Z","updated_at":"2026-11-02T14:48:57.661503Z"}],"nvd":[{"id":"CVE-2008-1392","description":"The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS accessible through anonymous VIX API calls, which has unknown impact and attack vectors.","status":"published","published":"2008-03-20T00:44:00Z","modified":"2026-06-16T22:51:39.137Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-16"],"updated_at":"2026-11-02T14:01:25.857543Z"}]}}