VirtualBox

Ticket #4090 (closed defect: fixed)

Opened 6 months ago

Last modified 5 months ago

full access to the host filesystem via shared folders

Reported by: john.doe Assigned to:
Priority: critical Component: shared folders
Version: VirtualBox 2.2.2 Keywords: path traversal
Cc: Guest type: Linux
Host type: Windows

Description

Anyone under guest Linux OS will be able to access host filesystem by using the simplest "\\.." path traversal technique. "Read only" option in the shared folders list still have its effect.

Attachments

sshot_001.2.png (9.9 kB) - added by john.doe on 2009-05-24 14:12:25.
sshot_002.png (18.5 kB) - added by john.doe on 2009-05-24 14:12:33.
sshot_003.png (33.5 kB) - added by john.doe on 2009-05-24 14:12:44.

Change History

2009-05-24 14:12:25 changed by john.doe

  • attachment sshot_001.2.png added.

2009-05-24 14:12:33 changed by john.doe

  • attachment sshot_002.png added.

2009-05-24 14:12:44 changed by john.doe

  • attachment sshot_003.png added.

2009-05-29 23:41:18 changed by frank

  • status changed from new to closed.
  • resolution set to fixed.

© 2009 Sun Microsystems, Inc.
Contact – Privacy policy