CVE-2004-2408
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
31/12/2004
Last modified:
11/07/2017
Description
Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in /proc to obtain system information or cause a denial of service on other virtual servers or the host server.
Impact
Base Score 2.0
3.60
Severity 2.0
LOW
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:vserver:linux-vserver:1.3.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:vserver:linux-vserver:1.3.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:vserver:linux-vserver:1.3.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:vserver:linux-vserver:1.3.3:*:*:*:*:*:*:* | ||
| cpe:2.3:a:vserver:linux-vserver:1.3.4:*:*:*:*:*:*:* | ||
| cpe:2.3:a:vserver:linux-vserver:1.3.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:vserver:linux-vserver:1.3.6:*:*:*:*:*:*:* | ||
| cpe:2.3:a:vserver:linux-vserver:1.3.7:*:*:*:*:*:*:* | ||
| cpe:2.3:a:vserver:linux-vserver:1.3.8:*:*:*:*:*:*:* | ||
| cpe:2.3:a:vserver:linux-vserver:1.3.9:*:*:*:*:*:*:* | ||
| cpe:2.3:a:vserver:linux-vserver:1.9.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:vserver:linux-vserver:1.20:*:*:*:*:*:*:* | ||
| cpe:2.3:a:vserver:linux-vserver:1.21:*:*:*:*:*:*:* | ||
| cpe:2.3:a:vserver:linux-vserver:1.22:*:*:*:*:*:*:* | ||
| cpe:2.3:a:vserver:linux-vserver:1.23:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page