CVE-2007-4993

Published: Sep 27, 2007Modified: Apr 23, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.

Affected (1)

Products: Xensource Inc: Xen

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xensource Inc Xen	Version 3.0.3

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (42)

http://bugzilla.xensource.com/bugzilla/show_bug.cgi?id=1068

Source: secalert@redhat.com

http://secunia.com/advisories/26986

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27047

Source: secalert@redhat.com

http://secunia.com/advisories/27072

Source: secalert@redhat.com

http://secunia.com/advisories/27085

Source: secalert@redhat.com

http://secunia.com/advisories/27103

Source: secalert@redhat.com

http://secunia.com/advisories/27141

Source: secalert@redhat.com

http://secunia.com/advisories/27161

Source: secalert@redhat.com

http://secunia.com/advisories/27486

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1384

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:203

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0323.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/481825/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/25825

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-527-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/3348

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1752

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11240

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00004.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00030.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00082.html

Source: secalert@redhat.com

http://bugzilla.xensource.com/bugzilla/show_bug.cgi?id=1068

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26986

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/27047

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27072

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27085

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27103

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27141

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27161

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27486

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2007/dsa-1384

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2007:203

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2007-0323.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/481825/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/25825

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-527-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/3348

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-1752

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11240

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00030.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00082.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.