CVE-2009-0876

MÉDIO 6.9CVE-2009-0876 · Published 12/03/2009 · updated 16/06/2026

Em resumo

CVE-2009-0876 é uma vulnerabilidade MÉDIO (CVSS 6.9) que afeta xvm virtualbox (sun).
Chance de exploração nos próximos 30 dias (EPSS): 0.78%, maior que 56.0% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
xvm virtualbox sun	`= 2.0.0= 2.0.2= 2.0.4= 2.0.6r39760= 2.1.0= 2.1.2= 2.1.4r42893`	No fix yet

Description

Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DT_RPATH:$ORIGIN.

References

osvdb.org/52580
secunia.com/advisories/34232 · Vendor Advisory
sunsolve.sun.com/search/document.do · Patch
openwall.com/lists/oss-security/2009/03/15/1
openwall.com/lists/oss-security/2009/03/17/2
securityfocus.com/bid/34080 · Exploit
securitytracker.com/id
virtualbox.org/ticket/3444 · Patch
vupen.com/english/advisories/2009/0674 · Patch
bugs.gentoo.org/show_bug.cgi
exchange.xforce.ibmcloud.com/vulnerabilities/49193

Mais vulnerabilidades de xvm virtualbox

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free