CVE-2008-5256

The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows...

4.4 Medium

The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file.

Exploit likelihood

0.35%Down 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 4.4

Record: CVE-2008-5256
CVSS 2.0: 4.4 MediumAV:L/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-59
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-5256
Updated: 2026-11-02

EUVDEUVD-2008-5233 No score

Record: EUVD-2008-5233
Updated: 2026-11-03

GitHub AdvisoriesGHSA-xm9p-q7g6-fm6p No score

The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows...

Record: GHSA-xm9p-q7g6-fm6p
Weakness: CWE-59
Updated: 2026-11-02

Affected products

virtualox

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-5256 is a medium vulnerability (CVSS 4.4) in Virtualox, published November 27, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. No source names a fixed version.

References

Show 7 moreShow less