CVE-2005-4459
HighExploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
A heap-based buffer overflow in VMware NAT networking components (vmnat.exe and vmnet-natd) in Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted EPRT and PORT FTP commands.
Risk Assessment
The risk is that a guest or remote attacker could gain control over the host system, compromising confidentiality, integrity, and availability.
Recommendation
Immediately update VMware to the latest available version and restrict access to NAT services to trusted networks only.
Original NVD description (English source)
Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands.