1. CVE-Search
  2. CVE-2006-2110
ID CVE-2006-2110
Summary Virtual Private Server (Vserver) 2.0.x before 2.0.2-rc18 and 2.1.x before 2.1.1-rc18 provides certain context capabilities (ccaps) that allow local guest users to perform operations that were only intended to be allowed by the guest-root. This vulnerability is addressed in the following product releases: Virtual Private Server, Vserver, 2.0.2-rc18 Virtual Private Server, Vserver, 2.1.1-rc18
References
Vulnerable Configurations
  • cpe:2.3:a:virtual_private_server:vserver:2.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:virtual_private_server:vserver:2.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:virtual_private_server:vserver:2.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:virtual_private_server:vserver:2.1.1:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 20-07-2017 - 01:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 17842
confirm http://dev.croup.de/proj/gentoo-vps/browser/vserver-sources/2.0.1-r4/4915_vs2.0.1-vxcapable-fix.patch
debian DSA-1060
mlist [Vserver] 20060428 [SECURITY] ccaps not limited to root inside a guest
secunia
  • 19961
  • 20206
vupen ADV-2006-1661
xf linux-vserver-ccaps-privilege-escalation(26285)
Last major update 20-07-2017 - 01:31
Published 01-05-2006 - 19:06
Last modified 20-07-2017 - 01:31
Back to Top