CVE-2004-2408

{"id": "CVE-2004-2408", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2004-12-31T05:00:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2004-07/0040.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://linux-vserver.org/ChangeLog", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/12021", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1010643", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/7480", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/10660", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16626", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in /proc to obtain system information or cause a denial of service on other virtual servers or the host server."}], "lastModified": "2017-07-11T01:31:52.157", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vserver:linux-vserver:1.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC4E0322-CB40-4F6A-AC8D-65E88D4DCB6F"}, {"criteria": "cpe:2.3:a:vserver:linux-vserver:1.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "611D1000-D652-4A4E-B586-AA86CFE46037"}, {"criteria": "cpe:2.3:a:vserver:linux-vserver:1.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "659AADB3-F844-4862-9AD4-93606EE87A06"}, {"criteria": "cpe:2.3:a:vserver:linux-vserver:1.3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B191BAB9-5A4B-44CF-B621-36A812827E5F"}, {"criteria": "cpe:2.3:a:vserver:linux-vserver:1.3.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1492C2F9-FDB8-46C6-AC31-A08DF3346690"}, {"criteria": "cpe:2.3:a:vserver:linux-vserver:1.3.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3582FBC3-48A0-4634-A834-F57639FF0AA7"}, {"criteria": "cpe:2.3:a:vserver:linux-vserver:1.3.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9DB2AD0E-4F6B-4495-A8E6-64738D8CD80C"}, {"criteria": "cpe:2.3:a:vserver:linux-vserver:1.3.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "68AFFD5E-55AA-46E0-A7DD-5E55B3AB625B"}, {"criteria": "cpe:2.3:a:vserver:linux-vserver:1.3.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1BF8CDFC-415E-486A-89CC-F282E3E737EA"}, {"criteria": "cpe:2.3:a:vserver:linux-vserver:1.3.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "210A080B-1DD1-4F80-93EE-76E84BBE4F17"}, {"criteria": "cpe:2.3:a:vserver:linux-vserver:1.9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4546690D-3390-4867-A27E-B36CC0DEA3F6"}, {"criteria": "cpe:2.3:a:vserver:linux-vserver:1.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A4697C1-A42F-4361-B551-1829CDA8BB3E"}, {"criteria": "cpe:2.3:a:vserver:linux-vserver:1.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "986B4DA4-1C72-4BE1-9D41-0C1A6B908C0D"}, {"criteria": "cpe:2.3:a:vserver:linux-vserver:1.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4A730470-F8A0-44A8-A228-935A7C8217D2"}, {"criteria": "cpe:2.3:a:vserver:linux-vserver:1.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "291CEFF8-B1B5-4124-962D-B328AC862DF4"}, {"criteria": "cpe:2.3:a:vserver:linux-vserver:1.24:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2E86CE0-63D7-4BAC-AA82-90966A6898D3"}, {"criteria": "cpe:2.3:a:vserver:linux-vserver:1.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2085842D-8782-4D6E-BEA4-84798FFEE00B"}, {"criteria": "cpe:2.3:a:vserver:linux-vserver:1.26:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "904F270B-D19C-4E2F-BE8F-D36CBAA3F3B2"}, {"criteria": "cpe:2.3:a:vserver:linux-vserver:1.27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2E6C095-E770-4D66-A670-BE68FFA65E71"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}