CVE-2009-0876: sun xvm_virtualbox Link Following

Vulnerability summary

CVE-2009-0876 is a medium (CVSS 6.9) Link Following vulnerability in sun xvm_virtualbox. EPSS estimates a 0.78% chance of exploitation in the next 30 days, higher than 55% of scored vulnerabilities. 2 public exploits are recorded.

Timeline

1. 12-03-2009
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DT_RPATH:$ORIGIN.

• CWE-59Improper Link Resolution Before File Access ('Link Following')The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.