Full Disclosure mailing list archives
Owning VirtualBox via MITM
From: "Mark Wadham" <fd () rkw io>
Date: Mon, 04 Dec 2017 08:23:52 +0000
VirtualBox downloads extension pack updates over plain HTTP, providing a potential vector for MITM and remote code execution when updating the extension pack.
Full writeup here: https://m4.rkw.io/blog/owning-virtualbox-via-mitm.html Mark _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
Current thread:
- Owning VirtualBox via MITM Mark Wadham (Dec 05)