Sun VirtualBox Guest Additions本地拒绝服务漏洞

Bugraq ID: 37024 Sun VirtualBox Guest Additions是一款免费虚拟机软件，支持多个平台。 Sun VirtualBox Guest Additions存在一个安全漏洞，允许本地非特权用户消耗Guest操作系统的所有内核内存，造成Guest操作系统拒绝服务攻击。 成功利用此漏洞需要Guest Additions安装在Guest操作系统中。 Sun VirtualBox Guest Additions 3.0.8 Sun VirtualBox Guest Additions 2.0.10 Sun VirtualBox Guest Additions...

AIMP2 Audio Converter Playlist Buffer Overflow

Vulnerability : AIMP2 Audio Converter Playlist pls BOF Discovered by : mrme http://milw0rm.com/exploits/9561 Sploit written by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit written : nov 7th, 2009 Sploit released : nov 11th, 2009 Type : local and remote code execution OS : Windows Product : AIM...

CVE-2009-3940

Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12, 2.1.x, and 2.2.x, and Sun VirtualBox before 3.0.10, allows guest OS users to cause a denial of service memory consumption on the guest OS via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12, 2.1.x, and 2.2.x, and Sun VirtualBox before 3.0.10, allows guest OS users to cause a denial of service memory consumption on the guest OS via unknown vectors...

CVE-2009-3940

Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12, 2.1.x, and 2.2.x, and Sun VirtualBox before 3.0.10, allows guest OS users to cause a denial of service memory consumption on the guest OS via unknown vectors...

CVE-2009-3940

Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12, 2.1.x, and 2.2.x, and Sun VirtualBox before 3.0.10, allows guest OS users to cause a denial of service memory consumption on the guest OS via unknown vectors...

CVE-2009-3940

CVE-2009-3940 affects Sun xVM VirtualBox Guest Additions in VirtualBox 1.6.x and 2.0.x (before 2.0.12), 2.1.x, 2.2.x, and Sun VirtualBox before 3.0.10. A guest OS user can cause a denial of service (memory consumption) on the guest via unknown vectors. Connected advisories confirm the issue acros...

AIMP2 Audio Converter Playlist (SEH)

Exploit for unknown platform in category local exploits ==================================== AIMP2 Audio Converter Playlist SEH ==================================== Title: AIMP2 Audio Converter Playlist SEH CVE-ID: OSVDB-ID: Author: corelanc0d3r Published: 2009-11-16 Verified: yes view source...

KLA10347 DoS vulnerability in VirtualBox

An unspecified vulnerability was found in xVM VirtualBox. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited locally via vectors related to guest additions. Original advisories - Related products Oracle-VirtualBox CVE list CVE-2009-39...

Authentication flaw

The VirtualBox 2.0.8 and 2.0.10 web service in Sun Virtual Desktop Infrastructure VDI 3.0 does not require authentication, which allows remote attackers to obtain unspecified access via vectors involving requests to an Apache HTTP Server...

CVE-2009-3923

The VirtualBox 2.0.8 and 2.0.10 web service in Sun Virtual Desktop Infrastructure VDI 3.0 does not require authentication, which allows remote attackers to obtain unspecified access via vectors involving requests to an Apache HTTP Server...

CVE-2009-3923

The VirtualBox 2.0.8 and 2.0.10 web service in Sun Virtual Desktop Infrastructure VDI 3.0 does not require authentication, which allows remote attackers to obtain unspecified access via vectors involving requests to an Apache HTTP Server...

CVE-2009-3923

The CVE-2009-3923 entry concerns VirtualBox 2.0.8/2.0.10 web service within Sun Virtual Desktop Infrastructure (VDI) 3.0 that does not require authentication. This allows remote attackers to obtain unspecified access through Apache HTTP Server–related request vectors. Relevant data from the conne...

Sun VirtualBox <= 3.0.6 privilege escalation

No description provided by source. !/bin/sh CVE-2009-3692 Sun VirtualBox = 3.0.6 local root exploit ======================================================== Exploits popen meta char shell injection vulnerability in Sun VirtualBox. E.g. admin@sundevil:/test$ id uid=101admin gid=10staff...

Sun VirtualBox 3.0.6 - Local Privilege Escalation

Sun VirtualBox 3.0.6 - Local Privilege Escalation !/bin/sh CVE-2009-3692 Sun VirtualBox runme.c include include include include include int mainint argc, char argv FILE from, to; int fd; char ch; setuid0; setgid0; from = fopen"/bin/sh","rb"; to = fopen"./sh","wb"; while!feoffrom ch = fgetcfrom;...

Sun VirtualBox 3.0.6 Local Root

!/bin/sh CVE-2009-3692 Sun VirtualBox runme.c include include include include include int mainint argc, char argv FILE from, to; int fd; char ch; setuid0; setgid0; from = fopen"/bin/sh","rb"; to = fopen"./sh","wb"; while!feoffrom ch = fgetcfrom; if!feoffrom fputcch, to; fclosefrom; fcloseto; fd =...

Sun VirtualBox <= 3.0.6 privilege escalation

Exploit for unknown platform in category local exploits ============================================ Sun VirtualBox runme.c include include include include include int mainint argc, char argv FILE from, to; int fd; char ch; setuid0; setgid0; from...

Sun VirtualBox 3.0.6 - Local Privilege Escalation

!/bin/sh CVE-2009-3692 Sun VirtualBox runme.c include include include include include int mainint argc, char argv FILE from, to; int fd; char ch; setuid0; setgid0; from = fopen"/bin/sh","rb"; to = fopen"./sh","wb"; while!feoffrom ch = fgetcfrom; if!feoffrom fputcch, to; fclosefrom; fcloseto; fd =...

CVE-2009-3692

Unspecified vulnerability in the VBoxNetAdpCtl configuration tool in Sun VirtualBox 3.0.x before 3.0.8 on Solaris x86, Linux, and Mac OS X allows local users to gain privileges via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the VBoxNetAdpCtl configuration tool in Sun VirtualBox 3.0.x before 3.0.8 on Solaris x86, Linux, and Mac OS X allows local users to gain privileges via unknown vectors...