CVE-2005-4347

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2005-4347

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2005-4347.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2005-4347

Downstream

DSA-1011-1

Withdrawn

2024-06-30T15:56:55.469593Z

Published

2005-12-31T05:00:00Z

Modified

2024-06-04T04:00:19Z

Summary

[none]

Details

The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the "chroot barrier" with util-vserver, which allows attackers to access files on the host system that are outside of the vserver.

References

Affected packages

Debian:10 / util-vserver

Package

Name: util-vserver
Purl: pkg:deb/debian/util-vserver?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.30.208-1

Ecosystem specific

{
    "urgency": "medium"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2005-4347.json"