Well, VPC actually needs to run as root so it can alter firewall rules for networking in the Guest OS.
Although its a file permission issue and most users run vpc on standalone systems. It does allow priv escalation to root. I think the biggest danger would be in a lab environment where VPC has been installed...
This vulnerability is on the host OS, and in fact you don't even need to boot the guest OS :)
Well, VPC actually needs to run as root so it can alter firewall rules for networking in the Guest OS.
Although its a file permission issue and most users run vpc on standalone systems. It does allow priv escalation to root. I think the biggest danger would be in a lab environment where VPC has been installed...
I actually found this vulnerability before the app was bought by Microsoft (or before I knew it had been acquired by them) :)
I believe the Nokia/Checkpoint platform is BSD based...