Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2007-4993

Опубликовано: 27 сент. 2007
Источник: nvd
CVSS2: 6.9
EPSS Низкий

Описание

pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:xensource_inc:xen:3.0.3:*:*:*:*:*:*:*

EPSS

Процентиль: 38%
0.00162
Низкий

6.9 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

ubuntu
больше 17 лет назад

pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.

redhat
больше 17 лет назад

pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.

debian
больше 17 лет назад

pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a gue ...

github
около 3 лет назад

pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.

oracle-oval
больше 17 лет назад

ELSA-2007-0323: Important: xen security update (IMPORTANT)

EPSS

Процентиль: 38%
0.00162
Низкий

6.9 Medium

CVSS2

Дефекты

CWE-20