Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
Debian Security Advisory DSA 1011-1 (kernel-patch-vserver, util-vserver)
Information
Severity
Severity
Family
Family
CVSSv2 Base
CVSSv2 Base
CVSSv2 Vector
CVSSv2 Vector
Solution Type
Solution Type
Created
Created
Modified
Modified
Summary
The remote host is missing an update to kernel-patch-vserver, util-vserver announced via advisory DSA 1011-1. Several vulnerabilities have been discovered in the Debian vserver support for Linux. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-4347 Bjørn Steinbrink discovered that the chroot barrier is not set correctly with util-vserver which may result in unauthorised escapes from a vserver to the host system. This vulnerability is limited to the 2.4 kernel patch included in kernel-patch-vserver. The correction to this problem requires updating the util-vserver package as well and installing a new kernel built from the updated kernel-patch-vserver package. CVE-2005-4418 The default policy of util-vserver is set to trust all unknown capabilities instead of considering them as insecure. The old stable distribution (woody) does not contain a kernel-patch-vserver package.
Solution
Solution
For the stable distribution (sarge) this problem has been fixed in version 1.9.5.5 of kernel-patch-vserver and in version 0.30.204-5sarge3 of util-vserver. For the unstable distribution (sid) this problem has been fixed in version 2.3 of kernel-patch-vserver and in version 0.30.208-1 of util-vserver. We recommend that you upgrade your util-vserver and https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201011-1