Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 13 Oct 2009 12:14:27 +0200
From: Tomas Hoger <>
Subject: Re: CVE request: local root via setuid VBoxNetAdpCtl

On Tue, 13 Oct 2009 08:38:40 +0200 Thomas Biege <> wrote:

> this one needs two CVE-IDs:
> - shell meta char injection in popen()
> - possible buffer overflow in strncpy()

I believe that the following got assigned for these independently of
this request:

Unspecified vulnerability in the VBoxNetAdpCtl configuration tool in
Sun VirtualBox 3.0.x before 3.0.8 on Solaris x86, Linux, and Mac OS X
allows local users to gain privileges via unknown vectors.

I know this does not satisfy your request, it's rather a heads-up to
avoid duplicate assignment.

Tomas Hoger / Red Hat Security Response Team

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.