VirtualBox

Ticket #4090 (closed defect: fixed)

Opened 5 years ago

Last modified 5 years ago

full access to the host filesystem via shared folders

Reported by: john.doe Owned by:
Priority: critical Component: shared folders
Version: VirtualBox 2.2.2 Keywords: path traversal
Cc: Guest type: Linux
Host type: Windows

Description

Anyone under guest Linux OS will be able to access host filesystem by using the simplest "\.." path traversal technique. "Read only" option in the shared folders list still have its effect.

Attachments

sshot_001.2.png Download (9.9 KB) - added by john.doe 5 years ago.
sshot_002.png Download (18.5 KB) - added by john.doe 5 years ago.
sshot_003.png Download (33.5 KB) - added by john.doe 5 years ago.

Change History

Changed 5 years ago by john.doe

Changed 5 years ago by john.doe

Changed 5 years ago by john.doe

comment:1 Changed 5 years ago by frank

  • Status changed from new to closed
  • Resolution set to fixed
Note: See TracTickets for help on using tickets.

www.oracle.com
ContactPrivacy policyTerms of Use