RDP crashes Virtualbox guest [DoS]

[nullslash]

Hello, I'm trying to enable external authentications but every time I try to connect to the guest screen, I find myself disconnected and the Virtal-guest crashes. If I enabled this in the internet, anyone can disable my access to my virtual-guests. I found someone has the same bug in the earlier release 2.x, but it seems everyone has ignored him.

Here is my log.

00:00:40.190 VRDP: New connection: 00:00:40.201 VRDP: Flags 0x00000003 00:00:40.201 VRDP: Channel: [cliprdr] [1004]. Accepted. 00:00:40.202 VRDP: Client seems to be rdesktop. 00:00:40.202 VRDP: Logon: T400 (127.0.0.1) build 2600. User: [root] Domain: [] Screen: 0 00:00:40.205 VRDPAUTH: User: [root]. Domain: []. Authentication type: [External] 00:00:40.205 VRDPAUTH: ConsoleVRDPServer::Authenticate: loading external authentication library 'VRDPAuth' 00:00:40.205 VRDPAUTH: Using entry point 'VRDPAuth'. 00:00:43.033 VRDPAUTH: external authentication module returned 'access denied' 00:00:43.033 VRDPAUTH: Access denied. 00:00:43.033 VRDP: Connection closed: 00:00:43.033 VRDP: Logoff: T400 (127.0.0.1) build 2600. User: [root] Domain: [] Reason 0x0001.

[nullslash]

VBox.log

[sunlover]

We need a core dump of the crash. Here is how to get one: ​http://www.virtualbox.org/wiki/Core_dump

[nullslash]

[root@T400 dump]# ls
[root@T400 dump]#  /usr/lib/virtualbox/VirtualBox -startvm srv2 &
[1] 8705
[root@T400 dump]# Qt WARNING: QGtkStyle cannot be used together with the GTK_Qt engine.
Qt WARNING: Qt: Session management error: None of the authentication protocols specified are supported

[1]+  Segmentation fault      (core dumped) /usr/lib/virtualbox/VirtualBox -startvm srv2
[root@T400 dump]# ls
[root@T400 dump]# find / -name core.8705

I'm trying get make the core dump works, but I think it doesn't work

Here is my Vbox.log from the beginning ​http://pastebin.com/f52ddf504

[Frank Mehnert]

Perhaps the core was dumped to a different directory or with a different name (perhaps just core not core.8705)?

[Frank Mehnert]

Still relevant with VBox 4.0.4?

[Frank Mehnert]

No response, closing.