In-Reply-To: <20020724103134.6884.qmail@mail.securityfocus.com> VMware has confirmed this vulnerability in VMware GSX Server 2.0.0 (for Windows) build 2050. Our testing also confirms that no other VMware products are vulnerable to the posted exploit. We have created a patch for the vulnerability. Users of VMware GSX Server 2.0.0 (for Windows) build 2050 should go to http://www.vmware.com/download/gsx_security.html to download the VMware Authorization Service patch. We will be releasing an update to VMware GSX Server 2.0 shortly that incorporates a fix to this vulnerability. We want to thank the author of the original post for identifying this vulnerability.