Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
vzctl before 4.9.4 determines the virtual environment (VE) layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which allows local simfs container (CT) root users to change the root password for arbitrary ploop containers, as demonstrated by a symlink attack on the ploop container root.hdd file and then access a control panel.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
vzctl 本地安全绕过漏洞
Vulnerability Description
vzctl是一套用来管理OpenVZ（基于Linux平台的操作系统级服务器虚拟化解决方案）的工具。 vzctl 4.9.4之前版本中存在安全漏洞，该漏洞源于程序根据root.hdd/DiskDescriptor.xml文件的存在确定virtual environment(VE)布局。本地攻击者可利用该漏洞更改任意ploop容器的root密码。
CVSS Information
N/A
Vulnerability Type
N/A