Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in /proc to obtain system information or cause a denial of service on other virtual servers or the host server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux VServer Project ProcFS弱共享权限漏洞
Vulnerability Description
Linux VServer是一个允许用户在一个普通的Linux服务器上建立虚拟专用的服务器的软件。 Linux VServer不正确设置procfs挂接目录(procfs mounted directory)，本地攻击者可以利用这个漏洞获得敏感内存内容或对主机系统进行拒绝服务攻击。 VSserver中的用户可以更改/proc的权限，如访问权限和属主。利用这个问题，攻击者可以设置权限防止其他用户读取/procfs目录信息而造成一定范围的拒绝服务，或者访问其他Vserver上的进程敏感信息或其他数据。
CVSS Information
N/A
Vulnerability Type
N/A