LxCenter Bug-Tracker

04/21/2010

05:42 pm HyperVM Security #78: HyperVM (all versions) - get_vm_name() remote privilege escalation

I think you should setcap() as appropriate and chmod g+ws /dev/vzctl after placing it in the lxlabs group. I am not ...

08:35 am HyperVM Security #78: HyperVM (all versions) - get_vm_name() remote privilege escalation

Hi Danny,
You should be able to add group write/exec permission to /dev/vzctl, and escalate process *capabilities*...

04/20/2010

08:23 pm HyperVM Security #78 (New): HyperVM (all versions) - get_vm_name() remote privilege escalation

Hello,
The HyperVM xen and openvz SSH access escalates privilege to root unnecessarily opening the system to a pot...