CVE-2009-0177: VMware Ace

Medium severity, CVSS 5.0. EPSS: 8.6% chance of exploitation in the next 30 days.

vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Player 2.5.1 build 126130, 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 2.0.x before 2.0.1 build 156745; and VMware Fusion before 2.0.2 build 147997 allows remote attackers to cause a denial of service (daemon crash) via a long (1) USER or (2) PASS command.

Affected products

• VMware Ace: up to and including 2.5.1; version 2.5.0 only
• VMware Fusion: up to and including 2.0.1
• VMware Server: version 2.0.0 only
• VMware VMware Player: up to and including 2.5.1; version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; …
• VMware VMware Workstation: up to and including 6.51; version 4.5.3 only; version 5.0 only; version 5.5.0 only; version 5.5.1 only; version 5.5.2 only; …

Published 2009-01-20. Last modified 2026-06-16.