debian/util-vserver vulnerabilities

Latest debian/util-vserver CVEs

Newest publication first

1. CVE-2006-1656 vserver in util-vserver 0.30.209 executes a command as root when the suexec userid parameter is invalid and non-numeric, which might cause local users to inadvertently execute dangerous commands as ro...

   Published 2006-04-06

   High·CVSS 7.2 EPSS 0.36%

   vserver in util-vserver 0.30.209 executes a command as root when the suexec userid parameter is invalid and non-numeric, which might cause local users to inadvertently execute dangerous commands as root.

2. CVE-2005-4347 The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the "chroot barrier" with util-vserver, which allows attackers to acces...

   Published 2006-03-22

   Medium·CVSS 5.0 EPSS 2.1%

   The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the "chroot barrier" with util-vserver, which allows attackers to access files on the host system that are outside of the vserver.

3. DSA-1011-1 kernel-patch-server, util-vserver - missing attribute support

   Published 2006-03-21

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.