PT-2013-6047
CVE-2013-6441
·
Published
2013-12-31
·
Updated
2014-06-15
Description by
CVSS 2.0
7.2
HighMetricsAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
LXC versions prior to 1.0.0.beta2
Description
The issue concerns the lxc-sshd template in LXC, which uses read-write permissions when mounting /sbin/init. This allows local users to gain privileges by modifying the init file.
Recommendations
For versions prior to 1.0.0.beta2, update to version 1.0.0.beta2 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾