CVE

Id
34522  
CVE No.
CVE-2008-4405  
Status
Candidate  
Description
xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM"s write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console/tty, (2) console/limit, or (3) image/device-model-pid. NOTE: this issue was originally reported as an issue in libvirt 0.3.3 and xenstore, but CVE is considering the core issue to be related to Xen.  
Phase
Assigned (20081003)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
378138 34522 CVE-2008-4405 MLIST:[oss-security] 20080930 CVE Request (xen)  View
378139 34522 CVE-2008-4405 URL:http://openwall.com/lists/oss-security/2008/09/30/6  View
378140 34522 CVE-2008-4405 MLIST:[xen-devel] 20080930 Re: [PATCH] [Xend] Move some backend configuration  View
378141 34522 CVE-2008-4405 URL:http://lists.xensource.com/archives/html/xen-devel/2008-09/msg00994.html  View
378142 34522 CVE-2008-4405 MLIST:[xen-devel] 20080930 [PATCH] [Xend] Move some backend configuration  View
378143 34522 CVE-2008-4405 URL:http://lists.xensource.com/archives/html/xen-devel/2008-09/msg00992.html  View
378144 34522 CVE-2008-4405 MLIST:[oss-security] 20081004 Re: CVE Request (xen)  View
378145 34522 CVE-2008-4405 URL:http://www.openwall.com/lists/oss-security/2008/10/04/3  View
378146 34522 CVE-2008-4405 CONFIRM:http://xenbits.xensource.com/staging/xen-3.3-testing.hg?rev/e0e17216ba70  View
378147 34522 CVE-2008-4405 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=464818  View
378148 34522 CVE-2008-4405 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=464817  View
378149 34522 CVE-2008-4405 MANDRIVA:MDVSA-2009:016  View
378150 34522 CVE-2008-4405 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:016  View
378151 34522 CVE-2008-4405 REDHAT:RHSA-2009:0003  View
378152 34522 CVE-2008-4405 URL:http://www.redhat.com/support/errata/RHSA-2009-0003.html  View
378153 34522 CVE-2008-4405 SUSE:SUSE-SR:2009:015  View
378154 34522 CVE-2008-4405 URL:http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html  View
378155 34522 CVE-2008-4405 BID:31499  View
378156 34522 CVE-2008-4405 URL:http://www.securityfocus.com/bid/31499  View
378157 34522 CVE-2008-4405 OVAL:oval:org.mitre.oval:def:10627  View
378158 34522 CVE-2008-4405 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10627  View
378159 34522 CVE-2008-4405 VUPEN:ADV-2008-2709  View
378160 34522 CVE-2008-4405 URL:http://www.vupen.com/english/advisories/2008/2709  View
378161 34522 CVE-2008-4405 SECTRACK:1020955  View
378162 34522 CVE-2008-4405 URL:http://www.securitytracker.com/id?1020955  View
378163 34522 CVE-2008-4405 SECUNIA:32064  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40739 JVNDB-2009-001745 libxml2 におけるエンティティの処理に関するサービス運用妨害 (DoS) の脆弱性 libxml2 には、エンティティの処理に関して不備があることにより、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-4409 34522 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001745.html  View