VirtualBox symbolic links vulnerability
Published:		18.01.2009
Source:		BUGTRAQ
SecurityVulns ID:		9598
Type:		remote
Level:		5/10
Description:		Insecure temporary files creation.

Affected:		SUN : VirtualBox 2.0
CVE:		CVE-2008-5256 (The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file.)

Original document

MANDRIVA, [ MDVSA-2009:011 ] virtualbox (18.01.2009)

Discuss:

Read or add your comments to this news (0 comments)