Unscored severity · published Mar 12, 2009
CVE-2009-0876
Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves…
–
CVSS
0.8%
EPSS
No
On KEV
Description
Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DT_RPATH:$ORIGIN.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XV
Xvm Virtualbox · Sun
2.0.0; 2.0.2; 2.0.4; 2.0.6r39760; 2.1.0; 2.1.2; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0876
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0876
osvdb.org
http://osvdb.org/52580
Vendor Advisory
http://secunia.com/advisories/34232
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-254568-1
www.openwall.com
http://www.openwall.com/lists/oss-security/2009/03/15/1
www.openwall.com
http://www.openwall.com/lists/oss-security/2009/03/17/2
Exploit
http://www.securityfocus.com/bid/34080
More from Xvm Virtualbox
–
CVE-2009-3940
Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12, 2.1.x, and 2.2.x, and Sun VirtualBox before 3.0.10, allows guest OS users to…