CVE-2004-2408: Vserver Linux-Vserver

Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in /proc to obtain system information or cause a denial of service on other virtual servers or the host server.

Affected products

• Vserver Linux-Vserver: version 1.3.0 only; version 1.3.1 only; version 1.3.2 only; version 1.3.3 only; version 1.3.4 only; version 1.3.5 only; …

Published 2004-12-31. Last modified 2026-06-16.