CVE-2007-4993
MEDIUM 6.9EPSS 0.6%
pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.
- CVSS v2.0 NVD
- 6.9 MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C - EPSS
- 0.63% chance of exploitation in the next 30 days, 49th percentile
- Published
- 2007-09-27
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://secunia.com/advisories/26986
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:203
- http://www.redhat.com/support/errata/RHSA-2007-0323.html
- http://www.securityfocus.com/bid/25825
- http://www.ubuntu.com/usn/usn-527-1