CVE-2007-0948

Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."...

CVE-2007-0948: Undefined Security Weakness

Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."...

Microsoft Virtual PC and Virtual Server Heap Overflow Vulnerability

Description Microsoft Virtual PC and Virtual Server are prone to a local heap-overflow vulnerability. To exploit this issue, attackers must have administrative privileges for the guest operating system. Attackers may exploit this issue to execute arbitrary code in the context of the host operatin...

Debian DSA-1060-1 : kernel-patch-vserver - programming error

Jan Rekorajski discovered that the kernel patch for virtual private servers does not limit context capabilities to the root user within the virtual server, which might lead to privilege escalation for some virtual server specific operations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

Security Best Practice: Familiarize Yourself with the Malicious Code Protector

Malicious Code Protector is a patent-pending technology from Check Point designed to detect buffer overflow attacks. Malicious Code Protector provides highly accurate and efficient detection of attacks through an analysis of executable code in a Virtual Server environment. Designed to detect even...

CVE-2004-2073

Linux-VServer 1.24 allows local users with root privileges on a virtual server to gain access to the filesystem outside the virtual server via a modified chroot-again exploit using the chmod command...

CVE-2004-2073

Technical details beyond the initial description are not provided in the connected documents; monitor for updates.

[UNIX] Linux Virtual Server/Secure Context Procfs Shared Permissions Flaw

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Linux Virtual Server procfs DoS

Virtual machine users can change /proc permissions...

CVE-2001-0617

Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote attacker to gain access to mapped services even though the single portmappings may be disabled...

CVE-2001-0617

Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote attacker to gain access to mapped services even though the single portmappings may be disabled...

CVE-2001-0617: Undefined Security Weakness

Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote attacker to gain access to mapped services even though the single portmappings may be disabled...

Дырки в PHP под Apache

В отдельных случаях можно обойти .htaccess, кроме того, отключив PHP на одном виртуальном сервере можно выключить егона всех остальных и получить доступ к коду...

CVE-2000-0322

The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package is vulnerable to arbitrary command execution via shell metacharacters. This flaw affects Red Hat 6.2 systems running the Piranha LVS cluster service and GUI (specifically the piranha and piranha-gui rpm packages). An authent...

CVE-2000-0322: Undefined Security Weakness

The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters...

RedHat 6.2 - Piranha Virtual Server Package Plaintext Password

RedHat 6.2 - Piranha Virtual Server Package Plaintext Password source: https://www.securityfocus.com/bid/1367/info Password changes submitted to Red Hat Piranha via HTTP are insecurely passed as variables in a GET request. Unauthorized users could obtain the password by reading the httpd access l...

CVE-2000-0248

The web GUI for the Linux Virtual Server LVS software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands...

CVE-2000-0322

The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters...

CVE-2000-0248

The web GUI for the Linux Virtual Server LVS software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands...

RedHat 6.2 Piranha Virtual Server Package - Default Account and Password

RedHat 6.2 Piranha Virtual Server Package - Default Account and Password source: https://www.securityfocus.com/bid/1148/info A default username and password has been discovered in the Piranha virtual server and load balancing package from RedHat. Version 0.4.12 of the piranha-gui program contains...