| Package | Affected versions | Patched versions |
|---|---|---|
| virtualox | = 1.3.2= 1.3.4= 1.3.6= 1.3.8= 1.4.0= 1.5.0= 1.5.2= 1.5.4= 1.5.6= 1.6.0= 1.6.2= 1.6.4= 1.6.6= 2.0.0= 2.0.2≤ 2.0.4 |
The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free