PT-2006-3090 · V-Server · V-Server

Jan Rekorajski · Published 2006-05-01 · Updated 2017-07-20 · CVE-2006-2110

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Virtual Private Server (Vserver) versions 2.0.x before 2.0.2-rc18 Virtual Private Server (Vserver) versions 2.1.x before 2.1.1-rc18

Description The issue allows local guest users to perform certain operations that were only intended to be allowed by the guest-root, due to the provision of certain context capabilities (ccaps) by the Virtual Private Server (Vserver).

Recommendations For Virtual Private Server (Vserver) versions 2.0.x before 2.0.2-rc18, update to version 2.0.2-rc18 or later. For Virtual Private Server (Vserver) versions 2.1.x before 2.1.1-rc18, update to version 2.1.1-rc18 or later.

Exploit

Fix

Related Identifiers

CVE-2006-2110

DSA-1060-1

Affected Products

V-Server

References · 9

• 🔥 http://list.linux-vserver.org/archive/vserver/msg13167.html · Exploit
• http://dev.croup.de/proj/gentoo-vps/browser/vserver-sources/2.0.1-r4/4915_vs2.0.1-vxcapable-fix.patch · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-2110 · Security Note
• http://debian.org/security/2006/dsa-1060 · Vendor Advisory
• http://securityfocus.com/bid/17842 · Note
• http://vupen.com/english/advisories/2006/1661 · Note
• http://secunia.com/advisories/19961 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26285 · Note
• http://secunia.com/advisories/20206 · Note