{"vulnerability": "CVE-2013-1662", "sightings": [{"uuid": "61ccea32-4e21-478e-8b7c-75f9d9a53843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1662", "type": "exploited", "source": "https://www.exploit-db.com/exploits/40169", "content": "", "creation_timestamp": "2013-08-22T00:00:00.000000Z"}, {"uuid": "ed7cd02a-04cc-4d67-8a36-df6fdadd138b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1662", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "61914630-3a21-40e4-b7ac-ef11367661cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1662", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:14.000000Z"}, {"uuid": "a5a80ece-b704-4c7c-acb0-64a720f6cf58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1662", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmware_mount.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "01e13bc5-f09c-4d89-927b-0465103daaf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2013-1662", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/27938", "content": "", "creation_timestamp": "2013-08-29T00:00:00.000000Z"}, {"uuid": "7c2cde92-af37-4ae6-8910-e7179e26fc1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1662", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmware_mount.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86\", \"author\": [\"Tavis Ormandy\", \"egypt \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"VMWare Workstation (up to and including 9.0.2 build-1031769)\\n            and Player have a setuid executable called vmware-mount that\\n            invokes lsb_release in the PATH with popen(3). Since PATH is\\n            user-controlled, and the default system shell on\\n            Debian-derived distributions does not drop privs, we can put\\n            an arbitrary payload in an executable called lsb_release and\\n            have vmware-mount happily execute it as root for us.\", \"disclosure_date\": \"2013-08-22\", \"fullname\": \"exploit/linux/local/vmware_mount\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:34 +0000\", \"name\": \"VMWare Setuid vmware-mount Unsafe popen(3)\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/local/vmware_mount.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/local/vmware_mount\", \"references\": [\"CVE-2013-1662\", \"OSVDB-96588\", \"BID-61966\", \"URL-http://blog.cmpxchg8b.com/2013/08/security-debianisms.html\", \"URL-http://web.archive.org/web/20130831060036/http://www.vmware.com:80/support/support-resources/advisories/VMSA-2013-0010.html\", \"URL-https://www.rapid7.com/blog/post/2013/09/05/cve-2013-1662-vmware-mount-exploit\"], \"rport\": null, \"session_types\": [], \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:14.027525Z"}]}