Back to search
CVE-2008-5256
Published: Nov 27, 2008
Modified: Aug 7, 2024
PUBLISHED
Description
The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
247326
vendor-advisory
x_refsource_SUNALERT
http://www.virtualbox.org/wiki/Changelog
x_refsource_CONFIRM
32851
third-party-advisory
x_refsource_SECUNIA
ADV-2008-3410
vdb-entry
x_refsource_VUPEN
1021384
vdb-entry
x_refsource_SECTRACK
SUSE-SR:2009:004
vendor-advisory
x_refsource_SUSE
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504149
x_refsource_CONFIRM
sun-virtualbox-ipcdunix-symlink(46826)
vdb-entry
x_refsource_XF
32444
vdb-entry
x_refsource_BID
MDVSA-2009:011
vendor-advisory
x_refsource_MANDRIVA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now