Privilege Escalation in Sun xVM VirtualBox on Linux
CVE-2009-0876

Currently unrated

Key Information:

Vendor
Oracle
Status
Xvm Virtualbox
Vendor
CVE Published:
12 March 2009

Summary

Local users on Linux systems can exploit a vulnerability in Sun xVM VirtualBox by using a hardlink attack. This flaw allows attackers to preserve setuid/setgid bits, potentially granting unauthorized privileges to accounts. The vulnerability affects multiple versions of the product, underlining the importance of timely updates and effective security measures.

References

http://www.securityfocus.com/bid/34080
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/49193
vdb-entryx_refsource_XF
http://www.vupen.com/english/advisories/2009/0674
vdb-entryx_refsource_VUPEN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.