Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

vbox3: privilege leak

Package(s):

vbox3

CVE #(s):

CAN-2004-0015

Created:

January 8, 2004

Updated:

January 14, 2004

Description:

A bug was discovered in vbox3, a voice response system for isdn4linux, whereby root privileges were not properly relinquished before executing a user-supplied tcl script. By exploiting this vulnerability, a local user could gain root privileges.

Alerts:

Debian

DSA-418-1

2004-01-07

(Log in to post comments)