cbcvebase.
CVE-2009-0876
published 2009-03-12

CVE-2009-0876: Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which…

PriorityP428medium6.9CVSS 2.0
AVLACMAuNCCICAC
EXPLOIT
EPSS
0.81%
52.3th percentile
Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DT_RPATH:$ORIGIN.

Affected

7 ranges
VendorProductVersion rangeFixed in
sunxvm_virtualbox——
sunxvm_virtualbox——
sunxvm_virtualbox——
sunxvm_virtualbox——
sunxvm_virtualbox——
sunxvm_virtualbox——
sunxvm_virtualbox——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.