CVE-2005-4347: Medium severity Debian Debian Linux vulnerability
The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the "chroot barrier" with util-vserver, which allows attackers to access files on the host system that are outside of the vserver.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4347?
The severity of CVE-2005-4347 is generally considered to be high due to the potential for unauthorized access to sensitive files.
How do I fix CVE-2005-4347?
To fix CVE-2005-4347, upgrade to kernel-patch-vserver version 1.9.5.5 or later for Debian systems.
What systems are affected by CVE-2005-4347?
CVE-2005-4347 affects Debian GNU/Linux versions 3.0 and 3.1 using kernel-patch-vserver version 1.9.5.5 or earlier.
What exploitation vectors exist for CVE-2005-4347?
Exploitation of CVE-2005-4347 could allow attackers to escape the isolated environment of a vserver and access host files.
What is the impact of CVE-2005-4347?
The impact of CVE-2005-4347 includes compromising the confidentiality and integrity of files on the host system.