Description
Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in /proc to obtain system information or cause a denial of service on other virtual servers or the host server.
References
- http://linux-vserver.org/ChangeLog
- 20040703 Linux Virtual Server/Secure Context procfs shared permissions flaw mailing-list
- 10660 vdb-entry
- 12021 third-party-advisory
- 1010643 vdb-entry
- 7480 vdb-entry
- linux-vserver-modify-permissions(16626) vdb-entry