CVE-2009-0876: Sun Xvm VirtualBox

Medium severity, CVSS 6.9. EPSS: 0.8% chance of exploitation in the next 30 days.

Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DT_RPATH:$ORIGIN.

Affected products

• Sun Xvm VirtualBox: version 2.0.0 only; version 2.0.2 only; version 2.0.4 only; version 2.0.6r39760 only; version 2.1.0 only; version 2.1.2 only; …

Published 2009-03-12. Last modified 2026-06-16.