CVE

Id
40960  
CVE No.
CVE-2009-3525  
Status
Candidate  
Description
The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-virtualized guests, which allows attackers with access to the para-virtualized guest console to boot the guest or modify the guest"s kernel boot parameters without providing the expected password.  
Phase
Assigned (20091001)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
448481 40960 CVE-2009-3525 MLIST:[oss-security] 20090925 CVE Request -- Xen -- PyGrub  View
448482 40960 CVE-2009-3525 URL:http://www.openwall.com/lists/oss-security/2009/09/25/1  View
448483 40960 CVE-2009-3525 CONFIRM:http://xenbits.xensource.com/xen-unstable.hg?rev/8f783adc0ee3  View
448484 40960 CVE-2009-3525 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=525740  View
448485 40960 CVE-2009-3525 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=525740#c0  View
448486 40960 CVE-2009-3525 REDHAT:RHSA-2009:1472  View
448487 40960 CVE-2009-3525 URL:http://www.redhat.com/support/errata/RHSA-2009-1472.html  View
448488 40960 CVE-2009-3525 SUSE:SUSE-SR:2010:012  View
448489 40960 CVE-2009-3525 URL:http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html  View
448490 40960 CVE-2009-3525 BID:36523  View
448491 40960 CVE-2009-3525 URL:http://www.securityfocus.com/bid/36523  View
448492 40960 CVE-2009-3525 OVAL:oval:org.mitre.oval:def:9466  View
448493 40960 CVE-2009-3525 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9466  View
448494 40960 CVE-2009-3525 SECTRACK:1022950  View
448495 40960 CVE-2009-3525 URL:http://www.securitytracker.com/id?1022950  View
448496 40960 CVE-2009-3525 SECUNIA:36908  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45370 JVNDB-2009-006377 RadScripts RadBids Gold の index.php における SQL インジェクションの脆弱性 RadScripts RadBids Gold の index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2009-3529 40960 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006377.html  View