----------------------------------------------------------------------

Did you know? Our assessment and impact rating along with detailed
information such as exploit code availability, or if an updated patch
is released by the vendor, is not part of this mailing-list?
        
Click here to learn more about our commercial solutions:
http://secunia.com/advisories/business_solutions/
        
Click here to trial our solutions:
http://secunia.com/advisories/try_vi/

----------------------------------------------------------------------

TITLE:
Sun xVM VirtualBox Privilege Escalation Vulnerability

SECUNIA ADVISORY ID:
SA34232

VERIFY ADVISORY:
http://secunia.com/advisories/34232/

DESCRIPTION:
A vulnerability has been reported in Sun xVM VirtualBox, which can be
exploited by malicious, local users to gain escalated privileges.

The vulnerability is caused due to an unspecified error in an
unspecified package, which can be exploited to execute arbitrary
commands with root privileges.

Successful exploitation requires permission to run VirtualBox.

The vulnerability is reported in Sun xVM VirtualBox 2.0.0, 2.0.2,
2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 for the Linux
platform.

NOTE: Only packages marked as "All distributions" are affected by
this issue.

SOLUTION:
Update to Sun xVM VirtualBox 2.0.6r43001 or 2.1.4r43001.
http://download.virtualbox.org/virtualbox/vboxdownload.html#linux

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
http://sunsolve.sun.com/search/document.do?assetkey=1-66-254568-1

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------