CVE-2007-4993

pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.63% chance of exploitation in the next 30 days, 48th percentile

Published

2007-09-27

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/30620

References

• CVE Record
• NVD entry

Related

• CVE-2007-4984
• CVE-2007-5003
• CVE-2007-4983
• CVE-2007-5009
• CVE-2007-4982
• CVE-2007-5010