FKIE_CVE-2009-0876

Vulnerability from fkie_nvd - Published: 2009-03-12 15:20 - Updated: 2026-06-16 23:06
Severity
Summary
Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DT_RPATH:$ORIGIN.
References
cve@mitre.orghttp://osvdb.org/52580
cve@mitre.orghttp://secunia.com/advisories/34232Vendor Advisory
cve@mitre.orghttp://sunsolve.sun.com/search/document.do?assetkey=1-66-254568-1Patch, Vendor Advisory
cve@mitre.orghttp://www.openwall.com/lists/oss-security/2009/03/15/1
cve@mitre.orghttp://www.openwall.com/lists/oss-security/2009/03/17/2
cve@mitre.orghttp://www.securityfocus.com/bid/34080Exploit
cve@mitre.orghttp://www.securitytracker.com/id?1021841
cve@mitre.orghttp://www.virtualbox.org/ticket/3444Patch, Vendor Advisory
cve@mitre.orghttp://www.vupen.com/english/advisories/2009/0674Patch, Vendor Advisory
cve@mitre.orghttps://bugs.gentoo.org/show_bug.cgi?id=260331
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/49193
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/52580
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/34232Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://sunsolve.sun.com/search/document.do?assetkey=1-66-254568-1Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2009/03/15/1
af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2009/03/17/2
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/34080Exploit
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1021841
af854a3a-2127-422b-91ae-364da2661108http://www.virtualbox.org/ticket/3444Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2009/0674Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://bugs.gentoo.org/show_bug.cgi?id=260331
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/49193
Impacted products
Vendor Product Version
sun xvm_virtualbox 2.0.0
sun xvm_virtualbox 2.0.2
sun xvm_virtualbox 2.0.4
sun xvm_virtualbox 2.0.6r39760
sun xvm_virtualbox 2.1.0
sun xvm_virtualbox 2.1.2
sun xvm_virtualbox 2.1.4r42893
linux linux_kernel *
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sun:xvm_virtualbox:2.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "004F2896-4A98-4385-982D-D75351ABEEE6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:xvm_virtualbox:2.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "F96D440E-4639-4DF2-BEB1-BAD33A7E80CA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:xvm_virtualbox:2.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "6C930392-136A-4C50-966E-D114C3DFB22E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:xvm_virtualbox:2.0.6r39760:*:*:*:*:*:*:*",
              "matchCriteriaId": "20D125F4-B18B-40EA-8E44-460F0F9587A0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:xvm_virtualbox:2.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5900799-F465-4071-8E84-6126357971D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:xvm_virtualbox:2.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "87877B75-41B5-4CF4-B3D1-D52EAF957675",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:xvm_virtualbox:2.1.4r42893:*:*:*:*:*:*:*",
              "matchCriteriaId": "64273D51-8F7D-4E79-AF81-8A036D6A8118",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "155AD4FB-E527-4103-BCEF-801B653DEA37",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DT_RPATH:$ORIGIN."
    },
    {
      "lang": "es",
      "value": "Sun xVM VirtualBox versiones 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2 y 2.1.4r42893 en Linux, permite a los usuarios locales alcanzar privilegios por medio de un ataque de enlace f\u00edsico, que conserva los bits de setuid/setgid en Linux, relacionado con DT_RPATH:$ORIGIN."
    }
  ],
  "evaluatorSolution": "Per: http://sunsolve.sun.com/search/document.do?assetkey=1-66-254568-1\r\n\r\n\"5. Resolution\r\n\r\nThis issue is addressed in the following releases:\r\n\r\nLinux\r\n\r\n    * Sun xVM VirtualBox 2.0.6r43001\r\n    * Sun xVM VirtualBox 2.1.4r43001\"",
  "id": "CVE-2009-0876",
  "lastModified": "2026-06-16T23:06:00.957",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 6.9,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.4,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2009-03-12T15:20:49.890",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/52580"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/34232"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254568-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.openwall.com/lists/oss-security/2009/03/15/1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.openwall.com/lists/oss-security/2009/03/17/2"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/34080"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1021841"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.virtualbox.org/ticket/3444"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2009/0674"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://bugs.gentoo.org/show_bug.cgi?id=260331"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49193"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/52580"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/34232"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254568-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openwall.com/lists/oss-security/2009/03/15/1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openwall.com/lists/oss-security/2009/03/17/2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/34080"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1021841"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.virtualbox.org/ticket/3444"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2009/0674"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugs.gentoo.org/show_bug.cgi?id=260331"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49193"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-59"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.