Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2009-0876

Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DT_RPATH:$ORIGIN.

  • Published: Mar 12, 2009
  • Updated: Apr 13, 2023
  • CVE: CVE-2009-0876
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.9
  • AV:L/AC:M/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
sun / xvm_virtualbox 2.0.0 2.0.0.x
sun / xvm_virtualbox 2.0.2 2.0.2.x
sun / xvm_virtualbox 2.0.4 2.0.4.x
sun / xvm_virtualbox 2.0.6r39760 2.0.6r39760.x
sun / xvm_virtualbox 2.1.0 2.1.0.x
sun / xvm_virtualbox 2.1.2 2.1.2.x
sun / xvm_virtualbox 2.1.4r42893 2.1.4r42893.x