Linux VServer Project ProcFS Weak Sharing Permissions Vulnerability
BID:10660
Info
Linux VServer Project ProcFS Weak Sharing Permissions Vulnerability
| Bugtraq ID: | 10660 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 05 2004 12:00AM |
| Updated: | Jul 05 2004 12:00AM |
| Credit: | Discovery of this vulnerability is credited to Veit Wahlich <[email protected]>. |
| Vulnerable: |
VServer Linux-VServer 1.27 VServer Linux-VServer 1.26 VServer Linux-VServer 1.25 VServer Linux-VServer 1.24 VServer Linux-VServer 1.23 VServer Linux-VServer 1.22 VServer Linux-VServer 1.21 VServer Linux-VServer 1.20 VServer Linux-VServer 1.9.1 VServer Linux-VServer 1.3.9 Gentoo Linux 1.4 Gentoo Linux 1.2 |
| Not Vulnerable: | |
Discussion
Linux VServer Project ProcFS Weak Sharing Permissions Vulnerability
It is reported that VServer may be used in order to disclose memory contents and to deny service to the host operating system and other virtual servers. The vulnerability exists due to weak sharing permissions on procfs mounted directories. It is reported that a user residing in a VServer may make changes to a procfs mounted directory any changes made will affect the host operating system and all VServers that exist.
An attacker may exploit this issue to disclose information or initiate a denial of service.
It is reported that VServer may be used in order to disclose memory contents and to deny service to the host operating system and other virtual servers. The vulnerability exists due to weak sharing permissions on procfs mounted directories. It is reported that a user residing in a VServer may make changes to a procfs mounted directory any changes made will affect the host operating system and all VServers that exist.
An attacker may exploit this issue to disclose information or initiate a denial of service.
Exploit / POC
Linux VServer Project ProcFS Weak Sharing Permissions Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
Linux VServer Project ProcFS Weak Sharing Permissions Vulnerability
Solution:
Gentoo has released advisory GLSA 200407-16 dealing with this and other issues. They have advised that users should upgrade to the latest available sources for their system:
# emerge sync
# emerge -pv your-favorite-sources
# emerge your-favorite-sources
# # Follow usual procedure for compiling and installing a kernel.
# # If you use genkernel, run genkernel as you would do normally.
For more information please see the referenced Gentoo advisory.
The vendor has released an update, which includes a tool to provide for proc security:
VServer Linux-VServer 1.20
VServer Linux-VServer 1.21
VServer Linux-VServer 1.22
VServer Linux-VServer 1.23
VServer Linux-VServer 1.24
VServer Linux-VServer 1.25
VServer Linux-VServer 1.26
VServer Linux-VServer 1.27
Solution:
Gentoo has released advisory GLSA 200407-16 dealing with this and other issues. They have advised that users should upgrade to the latest available sources for their system:
# emerge sync
# emerge -pv your-favorite-sources
# emerge your-favorite-sources
# # Follow usual procedure for compiling and installing a kernel.
# # If you use genkernel, run genkernel as you would do normally.
For more information please see the referenced Gentoo advisory.
The vendor has released an update, which includes a tool to provide for proc security:
VServer Linux-VServer 1.20
-
VServer Linux-VServer Stable Release 1.28
http://www.13thfloor.at/vserver/s_release/v1.28/
VServer Linux-VServer 1.21
-
VServer Linux-VServer Stable Release 1.28
http://www.13thfloor.at/vserver/s_release/v1.28/
VServer Linux-VServer 1.22
-
VServer Linux-VServer Stable Release 1.28
http://www.13thfloor.at/vserver/s_release/v1.28/
VServer Linux-VServer 1.23
-
VServer Linux-VServer Stable Release 1.28
http://www.13thfloor.at/vserver/s_release/v1.28/
VServer Linux-VServer 1.24
-
VServer Linux-VServer Stable Release 1.28
http://www.13thfloor.at/vserver/s_release/v1.28/
VServer Linux-VServer 1.25
-
VServer Linux-VServer Stable Release 1.28
http://www.13thfloor.at/vserver/s_release/v1.28/
VServer Linux-VServer 1.26
-
VServer Linux-VServer Stable Release 1.28
http://www.13thfloor.at/vserver/s_release/v1.28/
VServer Linux-VServer 1.27
-
VServer Linux-VServer Stable Release 1.28
http://www.13thfloor.at/vserver/s_release/v1.28/
References
Linux VServer Project ProcFS Weak Sharing Permissions Vulnerability
References:
References:
- Linux Virtual Server/Secure Context procfs shared permissions flaw (Veit Wahlich
) - VServer Home Page (VServer)
- Linux Virtual Server/Secure Context procfs shared permissions flaw (Veit Wahlich
)