CVE-2004-2408

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 3.6

EPSS Низкий

Описание

Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in /proc to obtain system information or cause a denial of service on other virtual servers or the host server.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2004-07/0040.html
Vendor Advisory
http://linux-vserver.org/ChangeLog
http://secunia.com/advisories/12021
Patch
Vendor Advisory
http://securitytracker.com/id?1010643
Vendor Advisory
http://www.osvdb.org/7480
http://www.securityfocus.com/bid/10660
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/16626
http://archives.neohapsis.com/archives/bugtraq/2004-07/0040.html
Vendor Advisory
http://linux-vserver.org/ChangeLog
http://secunia.com/advisories/12021
Patch
Vendor Advisory
http://securitytracker.com/id?1010643
Vendor Advisory
http://www.osvdb.org/7480
http://www.securityfocus.com/bid/10660
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/16626

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:vserver:linux-vserver:1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:vserver:linux-vserver:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:vserver:linux-vserver:1.3.2:*:*:*:*:*:*:*

cpe:2.3:a:vserver:linux-vserver:1.3.3:*:*:*:*:*:*:*

cpe:2.3:a:vserver:linux-vserver:1.3.4:*:*:*:*:*:*:*

cpe:2.3:a:vserver:linux-vserver:1.3.5:*:*:*:*:*:*:*

cpe:2.3:a:vserver:linux-vserver:1.3.6:*:*:*:*:*:*:*

cpe:2.3:a:vserver:linux-vserver:1.3.7:*:*:*:*:*:*:*

cpe:2.3:a:vserver:linux-vserver:1.3.8:*:*:*:*:*:*:*

cpe:2.3:a:vserver:linux-vserver:1.3.9:*:*:*:*:*:*:*

cpe:2.3:a:vserver:linux-vserver:1.9.1:*:*:*:*:*:*:*

cpe:2.3:a:vserver:linux-vserver:1.20:*:*:*:*:*:*:*

cpe:2.3:a:vserver:linux-vserver:1.21:*:*:*:*:*:*:*

cpe:2.3:a:vserver:linux-vserver:1.22:*:*:*:*:*:*:*

cpe:2.3:a:vserver:linux-vserver:1.23:*:*:*:*:*:*:*

cpe:2.3:a:vserver:linux-vserver:1.24:*:*:*:*:*:*:*

cpe:2.3:a:vserver:linux-vserver:1.25:*:*:*:*:*:*:*

cpe:2.3:a:vserver:linux-vserver:1.26:*:*:*:*:*:*:*

cpe:2.3:a:vserver:linux-vserver:1.27:*:*:*:*:*:*:*

EPSS

Процентиль: 20%

0.00065

Низкий

3.6 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-2408

debian

больше 20 лет назад

Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earli ...

GHSA-76vx-9pqq-3vp9

github

больше 3 лет назад