Secunia

Veit Wahlich has reported a weakness in Linux VServer, which can be exploited by certain malicious, local users to cause a DoS (Denial of Service) or gain knowledge of sensitive information.

The vulnerability is caused due to weak permissions on procfs, which allows a privileged user on a virtual server to manipulate the permissions on "/proc" for all virtual servers or gain knowledge of information related to other virtual servers.

The vulnerability has been reported in the following versions:
* 1.27 and prior (Linux 2.4 stable branch)
* 1.3.9 and prior (Linux 2.4 devel branch)
* 1.9.1 and prior (Linux 2.6 devel branch)

Solution
Update to version 1.28.
Further details available in Customer Area

Provided and/or discovered by
Veit Wahlich

Original Advisory
http://ircnet.de/article.shtml?vsproc

Deep Links
Links available in Customer Area