vbox3 Privilege State Error Lets Local Users Execute TCL Scripts With Root Privileges
Categorie: Vulnerability Posted: 2004-01-12 by ReCall Views: 384 Source: Click here
Current Rating: Not rated
Details
Description: A vulnerability was reported in vbox3. A local user can gain root privileges on the target system.
In October 2003, it was reported that 'vboxgetty/voice.c' does not properly drop root privileges before running a user-controlled TCL script. A local user can reportedly execute arbitrary scripts with root privileges to gain root access on the system.
Impact: A local user can execute scripts with root privileges.
Solution: The vendor has released a fixed version, available at:
