PT-2004-3503 · Linux · Linux-Vserver

Published 2004-12-31 · Updated 2008-09-05 · CVE-2004-2613

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux-VServer stable branch for the 2.4 kernel versions prior to 1.23 Linux-VServer development branch for the 2.4 kernel versions prior to 1.3.5

Description The issue is related to write access to specific proc entries from a vserver context, and it has unspecified impact and attack vectors.

Recommendations For Linux-VServer stable branch for the 2.4 kernel versions prior to 1.23, update to version 1.23 or later. For Linux-VServer development branch for the 2.4 kernel versions prior to 1.3.5, update to version 1.3.5 or later.

Exploit

Fix

Related Identifiers

CVE-2004-2613

Affected Products

Linux-Vserver

References · 4

• 🔥 http://osvdb.org/7586 · Exploit
• 🔥 http://list.linux-vserver.org/archive/vserver/msg05824.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2613 · Security Note
• http://linux-vserver.org/ChangeLog · Note