SimFS (VZ / OpenVZ) Exploit

Urgent Action Required

Looks like there is already a public exploit for the SimFS (VZ / OpenVZ) vulnerabilities that were disclosed today. The exploit will allow a malicious user to obtain any file from another container, making this a very serious vulnerability.

Updates should be applied as soon as possible.

Ongoing Discussion(s) via WHT:

• http://www.webhostingtalk.com/showthread.php?t=1387714
• http://www.webhostingtalk.com/showthread.php?t=1387707

Relevant Links / Updates:

• https://openvz.org/Download/kernel/rhel6/042stab090.5
• http://kb.parallels.com/en/122142

source: hostingseclist