CWE Code: 59
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Improper Link Resolution Before File Access ('Link Following')
Summary: sun xvm virtualbox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on linux, related to dt_rpath:$origin. per: http://sunsolve.sun.com/search/document.do?assetkey=1-66-254568-1

"5. resolution

this issue is addressed in the following releases:

linux

    * sun xvm virtualbox 2.0.6r43001
    * sun xvm virtualbox 2.1.4r43001"
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2009-03-12
Last Modified Date: 2017-08-17