Ticket #4090 (closed defect: fixed)
full access to the host filesystem via shared folders
| Reported by: | john.doe | Owned by: | |
|---|---|---|---|
| Component: | shared folders | Version: | VirtualBox 2.2.2 |
| Keywords: | path traversal | Cc: | |
| Guest type: | Linux | Host type: | Windows |
Description
Anyone under guest Linux OS will be able to access host filesystem by using the simplest "\.." path traversal technique. "Read only" option in the shared folders list still have its effect.
Attachments
-
sshot_001.2.png
(9.9 KB) -
added by john.doe 14 years ago.
-
sshot_002.png
(18.5 KB) -
added by john.doe 14 years ago.
-
sshot_003.png
(33.5 KB) -
added by john.doe 14 years ago.
Change History
Note: See
TracTickets for help on using
tickets.
