From: Erik Smit (vserver_at_zoiah.net)
Date: Mon 09 Feb 2004 - 00:01:50 GMT
On Mon, Feb 09, 2004 at 12:27:25AM +0100, Michael Hilscher wrote:
> i tried to upgrade my vserver installation from an 'ancient' 2.4.20 ctx
> 16 up to
> 2.4.24, 1.26, 0.28 (Tested with Debian Woody and SuSE 8.1).
> On my Testserver I found out, that the root-exploit is still working -
> aswell on updated old system (synced of productive server) and clean
> (means fresh installed) suse 8.1 system! Is there an special patch i
> need for vs1.26?
Did you chmod /vservers back to 000 after running the exploit on a
vulnerable system? The exploit chmods it to 001.
I fell for this one also. :)
Vserver mailing list