CVE-2004-2408
Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions...
CVE-2004-2408 is a low vulnerability (CVSS 3.6) in Vserver Linux-vserver, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 30th percentile. No source names a fixed version.
Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in /proc to obtain system information or cause a denial of service on other virtual servers or the host server.
Exploit likelihood
What each source reports
NVD Score used
Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in /proc to obtain system information or cause a denial of service on other virtual servers or the host server.
- Record
CVE-2004-2408- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:P/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in /proc to obtain system information or cause a denial of service on other virtual servers or the host server.
- Record
CVE-2004-2408- Updated
- 2026-11-02
EUVDEUVD-2004-2399 No score
Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in /proc to obtain system information or cause a denial of service on other virtual servers or the host server.
- Record
EUVD-2004-2399- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-76vx-9pqq-3vp9 No score
Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions...
Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in /proc to obtain system information or cause a denial of service on other virtual servers or the host server.
- Record
GHSA-76vx-9pqq-3vp9- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
linux-vserver.org/ChangeLog
archives.neohapsis.com/archives/bugtraq/2004-07/0040.html
securityfocus.com/bid/10660
secunia.com/advisories/12021
securitytracker.com/id?1010643
osvdb.org/7480
exchange.xforce.ibmcloud.com/vulnerabilities/16626
nvd.nist.gov/vuln/detail/CVE-2004-2408
github.com/advisories/GHSA-76vx-9pqq-3vp9