CVE-2005-4459: VMware Ace

High severity, CVSS 10.0. EPSS: 14.2% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands.

Affected products

• VMware Ace: version 1.0.1 only
• VMware Gsx Server: version 2.0 only; version 2.0.1_build_2129 only; version 2.5.1 only; version 2.5.1_build_5336 only; version 2.5.2 only; version 3.0 only; …
• VMware Player: version 1.0.0 only
• VMware Workstation: version 3.2.1 only; version 3.4 only; version 4.0 only; version 4.0.1 only; version 4.0.2 only; version 4.5.2 only; …

Published 2005-12-21. Last modified 2026-07-07.