CVE

Id
33548  
CVE No.
CVE-2008-3431  
Status
Candidate  
Description
The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \.VBoxDrv device and calling DeviceIoControl to send a crafted kernel address.  
Phase
Assigned (20080731)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
365232 33548 CVE-2008-3431 BUGTRAQ:20080804 CORE-2008-0716 - Sun xVM VirtualBox Privilege Escalation Vulnerability  View
365233 33548 CVE-2008-3431 URL:http://www.securityfocus.com/archive/1/archive/1/495095/100/0/threaded  View
365234 33548 CVE-2008-3431 MILW0RM:6218  View
365235 33548 CVE-2008-3431 URL:http://www.milw0rm.com/exploits/6218  View
365236 33548 CVE-2008-3431 MISC:http://www.coresecurity.com/content/virtualbox-privilege-escalation-vulnerability  View
365237 33548 CVE-2008-3431 CONFIRM:http://virtualbox.org/wiki/Changelog  View
365238 33548 CVE-2008-3431 SUNALERT:240095  View
365239 33548 CVE-2008-3431 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-240095-1  View
365240 33548 CVE-2008-3431 BID:30481  View
365241 33548 CVE-2008-3431 URL:http://www.securityfocus.com/bid/30481  View
365242 33548 CVE-2008-3431 VUPEN:ADV-2008-2293  View
365243 33548 CVE-2008-3431 URL:http://www.vupen.com/english/advisories/2008/2293  View
365244 33548 CVE-2008-3431 SECTRACK:1020625  View
365245 33548 CVE-2008-3431 URL:http://securitytracker.com/id?1020625  View
365246 33548 CVE-2008-3431 SECUNIA:31361  View
365247 33548 CVE-2008-3431 URL:http://secunia.com/advisories/31361  View
365248 33548 CVE-2008-3431 SREASON:4107  View
365249 33548 CVE-2008-3431 URL:http://securityreason.com/securityalert/4107  View
365250 33548 CVE-2008-3431 XF:sun-xvmvirtualbox-privilege-escalation(44202)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49396 JVNDB-2008-004706 LinkedIn Browser Toolbar における任意のコードを実行される脆弱性 LinkedIn Browser Toolbar は、更新の信頼性を適切に検証しないため、任意のコードを実行される脆弱性が存在します。 CVE-2008-3435 33548 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004706.html  View