CVE-2009-0876

Currently unrated

Key Information:

Vendor
Oracle
Status
Xvm Virtualbox
Vendor
CVE Published:
12 March 2009

Summary

Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DT_RPATH:$ORIGIN.

References

http://www.securityfocus.com/bid/34080
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/49193
vdb-entryx_refsource_XF
http://www.vupen.com/english/advisories/2009/0674
vdb-entryx_refsource_VUPEN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.