CVE-2009-0876

MEDIO 6.9CVE-2009-0876 · Published 12/03/2009 · updated 16/06/2026

In breve

CVE-2009-0876 è una vulnerabilità MEDIO (CVSS 6.9) che riguarda xvm virtualbox (sun).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.78%, superiore al 56.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
xvm virtualbox sun	`= 2.0.0= 2.0.2= 2.0.4= 2.0.6r39760= 2.1.0= 2.1.2= 2.1.4r42893`	No fix yet

Description

Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DT_RPATH:$ORIGIN.

References

osvdb.org/52580
secunia.com/advisories/34232 · Vendor Advisory
sunsolve.sun.com/search/document.do · Patch
openwall.com/lists/oss-security/2009/03/15/1
openwall.com/lists/oss-security/2009/03/17/2
securityfocus.com/bid/34080 · Exploit
securitytracker.com/id
virtualbox.org/ticket/3444 · Patch
vupen.com/english/advisories/2009/0674 · Patch
bugs.gentoo.org/show_bug.cgi
exchange.xforce.ibmcloud.com/vulnerabilities/49193

Altre vulnerabilità di xvm virtualbox

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free