CVE-2008-5256
The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows...
CVE-2008-5256 is a medium vulnerability (CVSS 4.4) in Virtualox, published November 27, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 29th percentile. No source names a fixed version.
- Severity
- 4.4 MediumCVSS 2.0, NVD
- Exploit chance
- 0.35%EPSS, 29th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file.
Exploit likelihood
Affected products
What each source reports
NVD Score used
The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file.
- Record
CVE-2008-5256- CVSS 2.0
- 4.4 Medium
AV:L/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE ListNo score
The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file.
- Record
CVE-2008-5256- Updated
- 2026-11-02
EUVDEUVD-2008-5233No score
The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file.
- Record
EUVD-2008-5233- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xm9p-q7g6-fm6pNo score
The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows...
The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file.
- Record
GHSA-xm9p-q7g6-fm6p- Weakness
- CWE-59
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
sunsolve.sun.com/search/document.do?assetkey=1-26-247326-1
virtualbox.org/wiki/Changelog
secunia.com/advisories/32851
vupen.com/english/advisories/2008/3410
securitytracker.com/id?1021384
Show 7 moreShow less
lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
bugs.debian.org/cgi-bin/bugreport.cgi?bug=504149
exchange.xforce.ibmcloud.com/vulnerabilities/46826
securityfocus.com/bid/32444
mandriva.com/security/advisories?name=MDVSA-2009:011
nvd.nist.gov/vuln/detail/CVE-2008-5256
github.com/advisories/GHSA-xm9p-q7g6-fm6p