CVE-2000-0090 in Workstation
Summary
by MITRE
VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 04/20/2026
The vulnerability identified as CVE-2000-0090 represents a significant security flaw in VMware Workstation version 1.1.2 that enables local users to execute a denial of service attack through symbolic link manipulation. This issue stems from inadequate input validation and insufficient access control mechanisms within the virtualization software's file handling processes. The vulnerability specifically targets the way VMware processes symbolic links during file operations, creating an exploitable condition that can be leveraged by malicious local users to disrupt normal system operations.
The technical flaw manifests when VMware Workstation encounters symbolic links in file paths during virtual machine operations or file system interactions. The software fails to properly resolve or validate symbolic link references, allowing attackers to craft malicious symlink structures that can cause the application to crash or become unresponsive. This occurs because the virtualization platform does not implement proper symlink traversal controls or access restriction mechanisms that would prevent unauthorized file access patterns. The vulnerability aligns with CWE-59, which describes improper handling of symbolic links, and demonstrates how insufficient path validation can lead to system instability.
From an operational perspective, this vulnerability presents a serious risk to virtualization environments where local users have access to the host system. Attackers can exploit this weakness to cause system-wide denial of service conditions, potentially disrupting critical virtual machine operations and affecting multiple concurrent users. The impact extends beyond individual virtual machines to potentially compromise the entire host system's stability and availability. Organizations running VMware Workstation in multi-user environments face particular risk, as local privilege escalation opportunities could allow attackers to gain broader system access. This vulnerability also aligns with ATT&CK technique T1499, which covers network disruption and denial of service attacks.
The attack vector requires local system access and involves creating or manipulating symbolic links in specific locations within the VMware file structure. This makes the vulnerability particularly concerning for shared hosting environments or systems where multiple users have local access. Mitigation strategies should include immediate patching of VMware Workstation to version 1.1.3 or later, which addresses the symbolic link handling issues through improved path validation and access control mechanisms. Additionally, system administrators should implement strict file permission controls and monitor for suspicious symlink creation activities. The vulnerability highlights the importance of proper input validation and access control in virtualization platforms, as these systems often serve as critical infrastructure components that require robust security measures to prevent exploitation.