CVEvulnerability

CVE-2008-5256

4.4 MEDIUM Published 2008-11-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-11-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-59

Description

The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file.

Affected configurations

• virtualox virtualox (<= 2.0.4) • virtualox virtualox 1.3.2 • virtualox virtualox 1.3.4 • virtualox virtualox 1.3.6 • virtualox virtualox 1.3.8 • virtualox virtualox 1.4.0 • virtualox virtualox 1.5.0 • virtualox virtualox 1.5.2 • virtualox virtualox 1.5.4 • virtualox virtualox 1.5.6 • virtualox virtualox 1.6.0 • virtualox virtualox 1.6.2 • virtualox virtualox 1.6.4 • virtualox virtualox 1.6.6 • virtualox virtualox 2.0.0 • virtualox virtualox 2.0.2

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References