PT-2009-3468 · Sun+1 · Virtualbox

Spanky · Published 2009-03-12 · Updated 2017-08-17 · CVE-2009-0876

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun xVM VirtualBox versions 2.0.0 through 2.1.4

Description The issue allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DT RPATH:$ORIGIN.

Recommendations For versions 2.0.0 through 2.1.4, consider restricting access to the setuid/setgid bits to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2009-0876

Affected Products

Virtualbox

References · 14

• 🔥 http://securityfocus.com/bid/34080 · Exploit
• 🔥 https://exploit-db.com/exploits/32848 · Exploit
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-254568-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0876 · Security Note
• http://vupen.com/english/advisories/2009/0674 · Vendor Advisory
• http://secunia.com/advisories/34232 · Vendor Advisory
• http://virtualbox.org/ticket/3444 · Vendor Advisory
• http://osvdb.org/52580 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49193 · Note
• http://securitytracker.com/id?1021841 · Note
• http://openwall.com/lists/oss-security/2009/03/15/1 · Note
• http://openwall.com/lists/oss-security/2009/03/17/2 · Note
• https://bugs.gentoo.org/show_bug.cgi?id=260331 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0876 · Note