Sun VirtualBox Host Operating System Local Denial Of Service Vulnerability

Bugtraq ID:	35960
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Aug 05 2009 12:00AM
Updated:	Aug 28 2009 07:52PM
Credit:	Sun
Vulnerable:	Sun VirtualBox 3.0.2 Sun VirtualBox 3.0
Not Vulnerable:	Sun VirtualBox 3.0.4

Sun VirtualBox Host Operating System Local Denial Of Service Vulnerability

Sun VirtualBox is prone to a local denial-of-service vulnerability.

Local attackers inside a VirtualBox virtual machine may exploit this issue to restart the host operating system, denying service to legitimate users.

The issue affects Sun VirtualBox 3.0.0 and 3.0.2.

NOTE: This issue may be related to the vulnerability described in BID 35915, but we don't have enough technical details to confirm this. We will update this BID when more information emerges.

Sun VirtualBox Host Operating System Local Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun VirtualBox Host Operating System Local Denial Of Service Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.

Sun VirtualBox Host Operating System Local Denial Of Service Vulnerability

References:

• VirtualBox Homepage (Sun Microsystems)
  
• Solution 265268: Security Vulnerability in Sun VirtualBox May Lead to Denial of (Sun)