Vulnerabilities > Vserver
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2006-04-06 | CVE-2006-1656 | Unspecified vulnerability in Vserver Util-Vserver 0.30.209 vserver in util-vserver 0.30.209 executes a command as root when the suexec userid parameter is invalid and non-numeric, which might cause local users to inadvertently execute dangerous commands as root. | 7.2 |
2005-12-31 | CVE-2005-4418 | Unspecified vulnerability in Vserver Util-Vserver 0/0.30.209 util-vserver before 0.30.208-1 with kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux sets a default policy that trusts unknown capabilities, which could allow local users to conduct unauthorized activities. | 7.5 |
2004-12-31 | CVE-2004-2613 | Remote Security vulnerability in Linux-VServer Unspecified vulnerability in procfs in the Linux-VServer stable branch for the 2.4 kernel before 1.23 and Linux-VServer development branch for the 2.4 kernel before 1.3.5 has unspecified impact and attack vectors, related to "write access to specific proc entries from a vserver context", a different vulnerability than CVE-2004-2408. | 10.0 |
2004-12-31 | CVE-2004-2408 | Unspecified vulnerability in Vserver Linux-Vserver Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in /proc to obtain system information or cause a denial of service on other virtual servers or the host server. | 3.6 |
2004-02-06 | CVE-2004-2073 | Linux-VServer 1.24 allows local users with root privileges on a virtual server to gain access to the filesystem outside the virtual server via a modified chroot-again exploit using the chmod command. | 7.2 |
2003-12-31 | CVE-2003-1288 | Denial-Of-Service vulnerability in Vserver Linux-Vserver 1.22 Multiple race conditions in Linux-VServer 1.22 with Linux kernel 2.4.23 and SMP allow local users to cause a denial of service (kernel oops) via unknown attack vectors related to the (1) s_info and (2) ip_info data structures and the (a) forget_original_parent, (b) goodness, (c) schedule, (d) update_process_times, and (e) vc_new_s_context functions. | 5.0 |