CVEvulnerability
CVE-2013-6441
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-02-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by modifying the init file.
Affected configurations
• linuxcontainers lxc (<= 0.9.0)
• linuxcontainers lxc 0.1.0
• linuxcontainers lxc 0.2.0
• linuxcontainers lxc 0.2.1
• linuxcontainers lxc 0.3.0
• linuxcontainers lxc 0.4.0
• linuxcontainers lxc 0.5.0
• linuxcontainers lxc 0.5.1
• linuxcontainers lxc 0.5.2
• linuxcontainers lxc 0.6.0
• linuxcontainers lxc 0.6.1
• linuxcontainers lxc 0.6.2
• linuxcontainers lxc 0.6.3
• linuxcontainers lxc 0.6.4
• linuxcontainers lxc 0.6.5
• linuxcontainers lxc 0.7.0
• linuxcontainers lxc 0.7.1
• linuxcontainers lxc 0.7.2
• linuxcontainers lxc 0.7.3
• linuxcontainers lxc 0.7.4
• linuxcontainers lxc 0.7.4.1
• linuxcontainers lxc 0.7.4.2
• linuxcontainers lxc 0.7.5
• linuxcontainers lxc 0.8.0
Related
Weakness · not in database (1)
References
- http://www.ubuntu.com/usn/USN-2104-1 www.ubuntu.com
- https://bugs.launchpad.net/ubuntu/%2Bsource/lxc/%2Bbug/1261045 bugs.launchpad.net
- https://github.com/dotcloud/lxc/pull/1 github.com
- https://github.com/lxc/lxc/commit/f4d5cc8e1f39d132b61e110674528cac727ae0e2 Exploit, Patch
- http://www.ubuntu.com/usn/USN-2104-1 www.ubuntu.com
- https://bugs.launchpad.net/ubuntu/%2Bsource/lxc/%2Bbug/1261045 bugs.launchpad.net
- https://github.com/dotcloud/lxc/pull/1 github.com
- https://github.com/lxc/lxc/commit/f4d5cc8e1f39d132b61e110674528cac727ae0e2 Exploit, Patch