The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade virtualboxUpgrade virtualbox-ose-guest-toolsUpgrade xorg-x11-driver-virtualbox-oseUpgrade virtualbox-guest-toolsUpgrade xorg-x11-driver-virtualboxUpgrade virtualbox-ose | Feb 17, 2015 | Nov 26, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub