CVE-2013-6441

Priority
Medium
Description
The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2
uses read-write permissions when mounting /sbin/init, which allows local
users to gain privileges by modifying the init file.
References
Bugs
Assigned-to
mdeslaur
Package
Source: lxc (LP Ubuntu Debian)
Upstream:needs-triage
Ubuntu 10.04 LTS (Lucid Lynx):ignored (reached end-of-life)
Ubuntu 12.04 LTS (Precise Pangolin):needed
Ubuntu 12.10 (Quantal Quetzal):needed
Ubuntu 13.10 (Saucy Salamander):released (1.0.0~alpha1-0ubuntu14.1)
Ubuntu 14.04 LTS (Trusty Tahr):not-affected (1.0.0~beta2-0ubuntu1)
Patches:
Upstream:https://github.com/lxc/lxc/commit/f4d5cc8e1f39d132b61e110674528cac727ae0e2
More Information

Valid XHTML 1.0 Strict

Updated: 2014-02-26 16:14:27 UTC (commit 7784)