Computer Security
[EN] securityvulns.ru no-pyccku


VirtualBox symbolic links vulnerability
Published:18.01.2009
Source:
SecurityVulns ID:9598
Type:remote
Threat Level:
5/10
Description:Insecure temporary files creation.
Affected:SUN : VirtualBox 2.0
CVE:CVE-2008-5256 (The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file.)
Original documentdocumentMANDRIVA, [ MDVSA-2009:011 ] virtualbox (18.01.2009)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod