CVE-2005-4347 The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the "chroot barrier" with util-vserver, which allows attackers to acces...
MediumCVSS 5.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the "chroot barrier" with util-vserver, which allows attackers to access files on the host system that are outside of the vserver.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian kernel-patch-vserver | < 1.9.5.5 | 1.9.5.5 |
| debian kernel-patch-vserver | >= 2.0, < 2.2 | 2.2 |
| debian linux | = 3.0 | No fix listed |
| debian linux | = 3.1 | No fix listed |
| debian/util-vserver(Debian:10) | < 0.30.208-1 | 0.30.208-1 |
References
- 19339 third-party-advisory vendor-advisory
- DSA-1011 vendor-advisory
- debian-vserver-chrootbarrier-gain-access(25406) third-party-advisory vdb-entry