CVE-2007-4993 pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted...
MediumCVSS 6.9
EPSS 0.63%
- Published
- Updated
- Exploit status
- No public exploit known
Description
pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xensource inc xen | = 3.0.3 | No fix listed |
References
- bugzilla.xensource.com
- 26986 third-party-advisory vendor-advisory
- 27047 third-party-advisory
- 27072 third-party-advisory
- 27085 third-party-advisory
- 27103 third-party-advisory
- 27141 third-party-advisory
- 27161 third-party-advisory
- 27486 third-party-advisory
- DSA-1384 vendor-advisory
- MDKSA-2007:203 vendor-advisory
- RHSA-2007:0323 vendor-advisory
- 20071008 rPSA-2007-0210-1 xen mailing-list
- 25825 vdb-entry
- USN-527-1 vendor-advisory
- ADV-2007-3348 vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:11240 signature vdb-entry
- FEDORA-2007-2708 vendor-advisory
- FEDORA-2007-2270 vendor-advisory
- FEDORA-2007-713 vendor-advisory