EUVD-2015-6861

Malware in sbrugna...

Design/Logic Flaw

vzctl before 4.9.4 determines the virtual environment VE layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which allows local simfs container CT root users to change the root password for arbitrary ploop containers, as demonstrated by a symlink attack on the...

CVE-2015-6927

CVE-2015-6927 affects vzctl (OpenVZ control tools) up to version 4.9.4. The vulnerability arises because vzctl determines the VE layout by checking for the presence of root.hdd/DiskDescriptor.xml in the VE private directory. This allows a local root user inside a simfs container to exploit a syml...

CVE-2015-6927

vzctl before 4.9.4 determines the virtual environment VE layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which allows local simfs container CT root users to change the root password for arbitrary ploop containers, as demonstrated by a symlink attack on the...