CVE-2008-5256
EUVD-2008-523327.11.2008, 00:30
The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| virtualox | virtualox | 𝑥 ≤ 2.0.4 |
| virtualox | virtualox | 1.3.2 |
| virtualox | virtualox | 1.3.4 |
| virtualox | virtualox | 1.3.6 |
| virtualox | virtualox | 1.3.8 |
| virtualox | virtualox | 1.4.0 |
| virtualox | virtualox | 1.5.0 |
| virtualox | virtualox | 1.5.2 |
| virtualox | virtualox | 1.5.4 |
| virtualox | virtualox | 1.5.6 |
| virtualox | virtualox | 1.6.0 |
| virtualox | virtualox | 1.6.2 |
| virtualox | virtualox | 1.6.4 |
| virtualox | virtualox | 1.6.6 |
| virtualox | virtualox | 2.0.0 |
| virtualox | virtualox | 2.0.2 |
𝑥
= Vulnerable software versions
Ubuntu Releases
References