Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-4011

Опубликовано: 09 нояб. 2019
Источник: nvd
CVSS3: 8.1
CVSS2: 6.8
EPSS Низкий

Описание

dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get a bash access as xenXX user on the dom0, and then access a potentially reuse an already opened VPS console.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:dtc-xen_project:dtc-xen:*:*:*:*:*:*:*:*
Версия от 0.5.0 (включая) до 0.5.4 (исключая)

EPSS

Процентиль: 59%
0.00388
Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-362

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 6 лет назад

dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get a bash access as xenXX user on the dom0, and then access a potentially reuse an already opened VPS console.

CVSS3: 8.1
debian
около 6 лет назад

dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an atta ...

github
больше 3 лет назад

dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get a bash access as xenXX user on the dom0, and then access a potentially reuse an already opened VPS console.

EPSS

Процентиль: 59%
0.00388
Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-362