CVE

Id
84204  
CVE No.
CVE-2015-6927  
Status
Candidate  
Description
vzctl before 4.9.4 determines the virtual environment (VE) layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which allows local simfs container (CT) root users to change the root password for arbitrary ploop containers, as demonstrated by a symlink attack on the ploop container root.hdd file and then access a control panel.  
Phase
Assigned (20150914)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
746604 84204 CVE-2015-6927 CONFIRM:https://openvz.org/Download/vzctl/4.9.4  View
746605 84204 CVE-2015-6927 CONFIRM:https://src.openvz.org/projects/OVZL/repos/vzctl/commits/9e98ea630ac0e88b44e3e23c878a5166aeb74e1c  View
746606 84204 CVE-2015-6927 DEBIAN:DSA-3357  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
10205 JVNDB-2015-005525 Apple iOS の GasGauge における特権付きコンテキスト内で任意のコードを実行される脆弱性 Apple iOS の GasGauge には、特権付きコンテキスト内で任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2015-6979 84204 9.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005525.html  View