NVD

Id
4231  
Name
CVE-2008-4405  
Description
xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM"s write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console/tty, (2) console/limit, or (3) image/device-model-pid. NOTE: this issue was originally reported as an issue in libvirt 0.3.3 and xenstore, but CVE is considering the core issue to be related to Xen.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-03  
Modified Date
2012-10-30  
Seq
2008-4405  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26885 4231 CVE-2008-4405 SUSE-SR:2009:015  View
26886 4231 CVE-2008-4405 [xen-devel] 20080930 [PATCH] [Xend] Move some backend configuration  View
26887 4231 CVE-2008-4405 [xen-devel] 20080930 Re: [PATCH] [Xend] Move some backend configuration  View
26888 4231 CVE-2008-4405 [oss-security] 20080930 CVE Request (xen)  View
26889 4231 CVE-2008-4405 oval:org.mitre.oval:def:10627  View
26890 4231 CVE-2008-4405 MDVSA-2009:016  View
26891 4231 CVE-2008-4405 [oss-security] 20081004 Re: CVE Request (xen)  View
26892 4231 CVE-2008-4405 RHSA-2009:0003  View
26893 4231 CVE-2008-4405 31499  View
26894 4231 CVE-2008-4405 1020955  View
26895 4231 CVE-2008-4405 ADV-2008-2709  View
26896 4231 CVE-2008-4405 http://xenbits.xensource.com/staging/xen-3.3-testing.hg?rev/e0e17216ba70  View
26897 4231 CVE-2008-4405 https://bugzilla.redhat.com/show_bug.cgi?id=464817  View
26898 4231 CVE-2008-4405 https://bugzilla.redhat.com/show_bug.cgi?id=464818  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46951 JVNDB-2008-002261 Xen の xend におけるサービス運用妨害 (DoS) の脆弱性 Xen の xend には、/local/domain xenstore ディレクトリツリーのコンテンツを限定をせず、このツリー内へのゲスト VM の書込みアクセスを制限しないため、サービス運用妨害 (DoS) やその他の詳細不明な脆弱性が存在します。 CVE-2008-4405 34518 CVE-2008-4405 4231 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002261.html 2008-10-03 2009-03-18 View