Vserver
Products
2- 6 CVEs
- 2 CVEs
Recent CVEs
8| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2004-2073 | 0.03 | — | 0.03 | Feb 6, 2004 | Linux-VServer 1.24 allows local users with root privileges on a virtual server to gain access to the filesystem outside the virtual server via a modified chroot-again exploit using the chmod command. | |||
| CVE-2006-4243 | 0.00 | — | 0.02 | Nov 6, 2019 | linux vserver 2.6 before 2.6.17 suffers from privilege escalation in remount code. | |||
| CVE-2006-1656 | 0.00 | — | 0.00 | Apr 6, 2006 | vserver in util-vserver 0.30.209 executes a command as root when the suexec userid parameter is invalid and non-numeric, which might cause local users to inadvertently execute dangerous commands as root. | |||
| CVE-2005-4418 | 0.00 | — | 0.02 | Dec 31, 2005 | util-vserver before 0.30.208-1 with kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux sets a default policy that trusts unknown capabilities, which could allow local users to conduct unauthorized activities. | |||
| CVE-2005-0178 | 0.00 | — | 0.00 | Mar 7, 2005 | Race condition in the setsid function in Linux before 2.6.8.1 allows local users to cause a denial of service (crash) and possibly access portions of kernel memory, related to TTY changes, locking, and semaphores. | |||
| CVE-2004-2408 | 0.00 | — | 0.00 | Dec 31, 2004 | Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in /proc to obtain system information or cause a denial of service on other virtual… | |||
| CVE-2004-2613 | 0.00 | — | 0.02 | Dec 31, 2004 | Unspecified vulnerability in procfs in the Linux-VServer stable branch for the 2.4 kernel before 1.23 and Linux-VServer development branch for the 2.4 kernel before 1.3.5 has unspecified impact and attack vectors, related to "write access to specific proc entries from a vserver… | |||
| CVE-2003-1288 | 0.00 | — | 0.02 | Dec 31, 2003 | Multiple race conditions in Linux-VServer 1.22 with Linux kernel 2.4.23 and SMP allow local users to cause a denial of service (kernel oops) via unknown attack vectors related to the (1) s_info and (2) ip_info data structures and the (a) forget_original_parent, (b) goodness, (c)… |
- CVE-2004-2073Feb 6, 2004risk 0.03cvss —epss 0.03
Linux-VServer 1.24 allows local users with root privileges on a virtual server to gain access to the filesystem outside the virtual server via a modified chroot-again exploit using the chmod command.
- CVE-2006-4243Nov 6, 2019risk 0.00cvss —epss 0.02
linux vserver 2.6 before 2.6.17 suffers from privilege escalation in remount code.
- CVE-2006-1656Apr 6, 2006risk 0.00cvss —epss 0.00
vserver in util-vserver 0.30.209 executes a command as root when the suexec userid parameter is invalid and non-numeric, which might cause local users to inadvertently execute dangerous commands as root.
- CVE-2005-4418Dec 31, 2005risk 0.00cvss —epss 0.02
util-vserver before 0.30.208-1 with kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux sets a default policy that trusts unknown capabilities, which could allow local users to conduct unauthorized activities.
- CVE-2005-0178Mar 7, 2005risk 0.00cvss —epss 0.00
Race condition in the setsid function in Linux before 2.6.8.1 allows local users to cause a denial of service (crash) and possibly access portions of kernel memory, related to TTY changes, locking, and semaphores.
- CVE-2004-2408Dec 31, 2004risk 0.00cvss —epss 0.00
Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in /proc to obtain system information or cause a denial of service on other virtual…
- CVE-2004-2613Dec 31, 2004risk 0.00cvss —epss 0.02
Unspecified vulnerability in procfs in the Linux-VServer stable branch for the 2.4 kernel before 1.23 and Linux-VServer development branch for the 2.4 kernel before 1.3.5 has unspecified impact and attack vectors, related to "write access to specific proc entries from a vserver…
- CVE-2003-1288Dec 31, 2003risk 0.00cvss —epss 0.02
Multiple race conditions in Linux-VServer 1.22 with Linux kernel 2.4.23 and SMP allow local users to cause a denial of service (kernel oops) via unknown attack vectors related to the (1) s_info and (2) ip_info data structures and the (a) forget_original_parent, (b) goodness, (c)…