VirtualBox

Ticket #4090 (closed defect: fixed)

Opened 10 years ago

Last modified 10 years ago

full access to the host filesystem via shared folders

Reported by: john.doe Owned by:
Component: shared folders Version: VirtualBox 2.2.2
Keywords: path traversal Cc:
Guest type: Linux Host type: Windows

Description

Anyone under guest Linux OS will be able to access host filesystem by using the simplest "\.." path traversal technique. "Read only" option in the shared folders list still have its effect.

Attachments

sshot_001.2.png Download (9.9 KB) - added by john.doe 10 years ago.
sshot_002.png Download (18.5 KB) - added by john.doe 10 years ago.
sshot_003.png Download (33.5 KB) - added by john.doe 10 years ago.

Change History

Changed 10 years ago by john.doe

Changed 10 years ago by john.doe

Changed 10 years ago by john.doe

comment:1 Changed 10 years ago by frank

  • Status changed from new to closed
  • Resolution set to fixed
Note: See TracTickets for help on using tickets.

www.oracle.com
ContactPrivacy policyTerms of Use