Package: open-vm-tools Severity: important Tags: security Hi, please see http://seclists.org/fulldisclosure/2014/Aug/71 for the original report. The affected script is shipped in open-vm-tools as /etc/vmware-tools/vm-support Cheers, Moritz