Sun VirtualBox VBoxNetAdpCtl Configuration Tool Local Privilege Escalation Vulnerability
BID:36604
Info
Sun VirtualBox VBoxNetAdpCtl Configuration Tool Local Privilege Escalation Vulnerability
| Bugtraq ID: | 36604 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-3692 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 06 2009 12:00AM |
| Updated: | Jan 14 2010 09:11AM |
| Credit: | Thomas Biege of SUSE Linux |
| Vulnerable: |
Sun VirtualBox 3.0.6 Sun VirtualBox 3.0.4 Sun VirtualBox 3.0.2 Sun VirtualBox 3.0 Pardus Linux 2009 0 Gentoo Linux |
| Not Vulnerable: |
Sun VirtualBox 3.0.8 |
Discussion
Sun VirtualBox VBoxNetAdpCtl Configuration Tool Local Privilege Escalation Vulnerability
Sun VirtualBox is prone to a local privilege-escalation vulnerability.
A local attacker can exploit this vulnerability to run arbitrary code with superuser privileges. Successful exploits will completely compromise affected computers.
Sun VirtualBox is prone to a local privilege-escalation vulnerability.
A local attacker can exploit this vulnerability to run arbitrary code with superuser privileges. Successful exploits will completely compromise affected computers.
Exploit / POC
Sun VirtualBox VBoxNetAdpCtl Configuration Tool Local Privilege Escalation Vulnerability
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following exploit is available:
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following exploit is available:
Solution / Fix
Sun VirtualBox VBoxNetAdpCtl Configuration Tool Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Sun VirtualBox VBoxNetAdpCtl Configuration Tool Local Privilege Escalation Vulnerability
References:
References: