Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the "chroot barrier" with util-vserver, which allows attackers to access files on the host system that are outside of the vserver.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux VServer Project可突破CHROOT环境漏洞
Vulnerability Description
Linux-VServer是一个允许用户在一个普通的Linux服务器上建立虚拟专用的服务器的软件。 Linux-VServer存在典型的"chroot-again"问题，本地攻击者可以利用这个漏洞以ROOT用户权限在系统上执行任意指令。 主要问题是VServer应用程序针对"chroot-again"类型的攻击没有很好的进行安全保护，攻击者可以利用这个漏洞脱离限制环境，访问限制目录之外的任意文件。
CVSS Information
N/A
Vulnerability Type
N/A