Sun VirtualBox宿主系统本地拒绝服务漏洞

Bugraq ID: 35960 CNCAN ID：CNCAN-2009080703 Sun VirtualBox是一款功能强大的x86虚拟机软件。 Sun VirtualBox 3.0存在安全问题，允许VirtualBox虚拟机中的非特权用户重新启动宿主操作系统，造成拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun VirtualBox 3.0.2 Sun VirtualBox 3.0 厂商解决方案 用户可升级到Sun VirtualBox 3.0.4版本： http://www.virtualbox.org/...

CVE-2009-2715

Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service Linux host OS reboot via a sysenter instruction...

CVE-2009-2714

Unspecified vulnerability in Sun VirtualBox 3.0.0 and 3.0.2 allows guest OS users to cause a denial of service host OS reboot via unknown vectors...

Code injection

Unspecified vulnerability in Sun VirtualBox 3.0.0 and 3.0.2 allows guest OS users to cause a denial of service host OS reboot via unknown vectors...

Design/Logic Flaw

Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service Linux host OS reboot via a sysenter instruction...

CVE-2009-2715

Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service Linux host OS reboot via a sysenter instruction...

CVE-2009-2714

Unspecified vulnerability in Sun VirtualBox 3.0.0 and 3.0.2 allows guest OS users to cause a denial of service host OS reboot via unknown vectors...

CVE-2009-2715

Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service Linux host OS reboot via a sysenter instruction...

CVE-2009-2715

Sun VirtualBox versions 2.2–3.0.2 r49928 are affected by CVE-2009-2715, where a guest OS user can cause a denial of service resulting in a host Linux reboot by executing the sysenter instruction. The vulnerability is described as a local issue (attack vector: local) with impact: availability (com...

CVE-2009-2714

Unspecified vulnerability in Sun VirtualBox 3.0.0 and 3.0.2 allows guest OS users to cause a denial of service host OS reboot via unknown vectors...

CVE-2009-2714

CVE-2009-2714 affects Sun xVM VirtualBox 3.0.0 and 3.0.2 (per multiple sources). The vulnerability enables a guest OS user to cause a denial-of-service on the host, potentially rebooting the host, via unknown vectors (NVD/SUSE entries). A Nessus plugin specifics that VirtualBox

Sun VirtualBox Host Reboot

Sun's VirtualBox host reboot PoC by Tadas Vilkeliskis Disclosure made at 2009-08-01 VULNERABILITY INFORMATION Remotely exploitable: no Locally exploitable: yes Affected versions: 2.2 - 3.0.2 r49928 for Linux VULNERABILITY DESCRIPTION VirtualBox VM is unable to handle fast call to privilege level ...

Sun VirtualBox宿主操作系统本地拒绝服务漏洞

Bugraq ID: 35915 Sun VirtualBox是一款功能强大的x86虚拟机软件。 Sun VirtualBox存在本地拒绝服务攻击，本地客户系统的攻击者可以利用漏洞重启宿主操作系统，造成拒绝服务攻击。 Sun VirtualBox 3.0.2 Sun VirtualBox 2.2 厂商解决方案 目前没有解决方案提供： http://www.virtualbox.org/ ; nasm -f elf vmhostreboot.asm ; gcc vmhostreboot.o -o vmhostreboot BITS 32 SECTION .text GLOBAL main...

Sun xVM VirtualBox 2.2 3.0.2 r49928 - Local Host Reboot (Denial of Service) (PoC)

Sun xVM VirtualBox 2.2 3.0.2 r49928 - Local Host Reboot Denial of Service PoC Sun's VirtualBox host reboot PoC by Tadas Vilkeliskis Disclosure made at 2009-08-01 VULNERABILITY INFORMATION Remotely exploitable: no Locally exploitable: yes Affected versions: 2.2 - 3.0.2 r49928 for Linux VULNERABILI...

VirtualBox 2.2 - 3.0.2 r49928 Local Host Reboot PoC

Exploit for multiple platform in category dos / poc =================================================== VirtualBox 2.2 - 3.0.2 r49928 Local Host Reboot PoC =================================================== Sun's VirtualBox host reboot PoC by Tadas Vilkeliskis Disclosure made at 2009-08-01...

VirtualBox 2.2 - 3.0.2 r49928 Local Host Reboot PoC

No description provided by source. Sun's VirtualBox host reboot PoC by Tadas Vilkeliskis [email protected] Disclosure made at 2009-08-01 VULNERABILITY INFORMATION Remotely exploitable: no Locally exploitable: yes Affected versions: 2.2 - 3.0.2 r49928 for Linux VULNERABILITY DESCRIPTION...

Sun xVM VirtualBox 2.2 < 3.0.2 r49928 - Local Host Reboot (Denial of Service) (PoC)

Sun's VirtualBox host reboot PoC by Tadas Vilkeliskis Disclosure made at 2009-08-01 VULNERABILITY INFORMATION Remotely exploitable: no Locally exploitable: yes Affected versions: 2.2 - 3.0.2 r49928 for Linux VULNERABILITY DESCRIPTION VirtualBox VM is unable to handle fast call to privilege level ...

openSUSE Security Update : virtualbox (virtualbox-513)

Insufficient checks on temporary files could allow users to trick others into overwriting arbitrary files CVE-2008-5256. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update virtualbox-513. The tex...

Mandriva Linux Security Advisory : virtualbox (MDVSA-2009:011)

A vulnerability have been discovered and corrected in VirtualBox, affecting versions prior to 2.0.6, which allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-qateam-ipc/lock temporary file CVE-2008-5256. The updated packages have been patched to prevent this...

Design/Logic Flaw

Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DTRPATH:$ORIGIN...