CVE-2005-4418

CVE-2005-4418 affects Debian vserver: util-vserver with kernel-patch-vserver, where the default policy trusts unknown capabilities, potentially allowing local privilege escalation. Root cause: insecure default policy in util-vserver components. Affected versions include kernel-patch-vserver 1.9.5...

CVE-2005-4347

The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the "chroot barrier" with util-vserver, which allows attackers to access files on the host system that are outside of the vserver...

CVE-2005-4347

CVE-2005-4347 affects Linux 2.4 kernel patch kernel-patch-vserver (and 2.x) for Debian; the chroot barrier is not set correctly in util-vserver, potentially permitting unauthorised escapes from a vserver to the host. OpenVAS/Debian DSAs describe that this vulnerability is limited to the 2.4 patch...

util-vserver restrictions bypass

All unknown capacities are allowed by default...

[SA19333] util-vserver Unknown Capabilities Handling Security Issue

TITLE: util-vserver Unknown Capabilities Handling Security Issue SECUNIA ADVISORY ID: SA19333 VERIFY ADVISORY: http://secunia.com/advisories/19333/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: Local system SOFTWARE: util-vserver 0.x http://secunia.com/product/8846/ DESCRIPTION: A securi...

[SECURITY] [DSA 1011-1] New kernel-patch-vserver packages fix root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 1011-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1011-1] New kernel-patch-vserver packages fix root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 1011-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2005 http://www.debian.org/security/faq -...

DSA-1011-1 kernel-patch-server, util-vserver - missing attribute support

Bulletin has no description...

CVE-2005-4418

util-vserver before 0.30.208-1 with kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux sets a default policy that trusts unknown capabilities, which could allow local users to conduct unauthorized activities...

CVE-2005-4347

The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the "chroot barrier" with util-vserver, which allows attackers to access files on the host system that are outside of the vserver...

CVE-2005-4347

The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the "chroot barrier" with util-vserver, which allows attackers to access files on the host system that are outside of the vserver...

CVE-2005-4418

util-vserver before 0.30.208-1 with kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux sets a default policy that trusts unknown capabilities, which could allow local users to conduct unauthorized activities...

CVE-2003-1288

CVE-2003-1288 concerns multiple race conditions in Linux-VServer 1.22 running on Linux kernel 2.4.23 with SMP. The vulnerability enables local users to trigger a denial of service (kernel oops) via attack vectors affecting the s_info and ip_info data structures and through the forget_original_par...

CVE-2003-1288

Multiple race conditions in Linux-VServer 1.22 with Linux kernel 2.4.23 and SMP allow local users to cause a denial of service kernel oops via unknown attack vectors related to the 1 sinfo and 2 ipinfo data structures and the a forgetoriginalparent, b goodness, c schedule, d updateprocesstimes, a...

CVE-2004-2613

The CVE-2004-2613 entry concerns an unspecified vulnerability in procfs for Linux-VServer on the 2.4 kernel (stable branch < 1.23; development branch

CVE-2004-2613

Unspecified vulnerability in procfs in the Linux-VServer stable branch for the 2.4 kernel before 1.23 and Linux-VServer development branch for the 2.4 kernel before 1.3.5 has unspecified impact and attack vectors, related to "write access to specific proc entries from a vserver context", a...

SAP DB detection

SAP is listening on the remote port. Description : SAP/DB vserver, an ERP software, is running on the remote port. Please make sure that you applied the last patches, as a buffer overflow attack has been published against it. OpenVAS Vulnerability Test $Id: sapdbdetect.nasl 6063 2017-05-03...

SAP/DB vserver Detection

SAP/DB vserver, an ERP software, is running on the remote port. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2004-2408

Technical details for CVE-2004-2408 are not publicly available in the provided documents. Monitor for updates.

CVE-2004-2408

Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in /proc to obtain system information or cause a denial of service on other virtual servers or the ho...