[FD] Owning VirtualBox via MITM

[Mark Wadham]

VirtualBox downloads extension pack updates over plain HTTP, providing a 
potential vector for MITM and remote code execution when updating the 
extension pack.

Full writeup here:
https://m4.rkw.io/blog/owning-virtualbox-via-mitm.html

Mark

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/