Summary
This host is installed with Sun VirtualBox and is prone to Privilege Escalation vulnerability.
Impact
Successful exploitation will let attacker to execute arbitrary commands with root privileges via specially crafted arguments.
Impact Level: Application
Solution
Upgrade to Sun VirtualBox version 3.0.8
http://www.virtualbox.org/wiki/Downloads
Insight
The flaw is due to the 'VBoxNetAdpCtl' configuration tool improperly sanitising arguments before passing them in calls to 'popen()'.
Affected
Sun VirtualBox version 3.x before 3.0.8
References
Severity
Classification
-
CVE CVE-2009-3692 -
CVSS Base Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Changetrack Local Privilege Escalation Vulnerability
- Mozilla Products Privilege Escalation Vulnerabily (Windows)
- Trend Micro Web Management Authentication Bypass Vulnerability
- Mozilla Products 'NoWaiverWrapper' Privilege Escalation Vulnerability (Windows)
- Multiple Brickcom Devices Authentication Bypass Vulnerability