NVD

Id
27697  
Name
CVE-2015-6927  
Description
vzctl before 4.9.4 determines the virtual environment (VE) layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which allows local simfs container (CT) root users to change the root password for arbitrary ploop containers, as demonstrated by a symlink attack on the ploop container root.hdd file and then access a control panel.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-09-28  
Modified Date
2015-09-29  
Seq
2015-6927  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
145262 27697 CVE-2015-6927 DSA-3357  View
145263 27697 CVE-2015-6927 https://openvz.org/Download/vzctl/4.9.4  View
145264 27697 CVE-2015-6927 https://src.openvz.org/projects/OVZL/repos/vzctl/commits/9e98ea630ac0e88b44e3e23c878a5166aeb74e1c  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9672 JVNDB-2015-004992 vzctl における任意の ploop コンテナの root パスワードを変更される脆弱性 vzctl は、仮想環境 (VE) の private ディレクトリの root.hdd/DiskDescriptor.xml の存在を基に VE のレイアウトを決定するため、任意の ploop コンテナの root パスワードを変更される脆弱性が存在します。 CVE-2015-6927 84152 CVE-2015-6927 27697 3.6 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004992.html 2015-08-26 2015-10-01 View