NVD

Id
57082  
Name
CVE-2007-4993  
Description
pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-09-27  
Modified Date
2011-03-07  
Seq
2007-4993  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
291404 57082 CVE-2007-4993 http://bugzilla.xensource.com/bugzilla/show_bug.cgi?id=1068  View
291405 57082 CVE-2007-4993 oval:org.mitre.oval:def:11240  View
291406 57082 CVE-2007-4993 DSA-1384  View
291407 57082 CVE-2007-4993 MDKSA-2007:203  View
291408 57082 CVE-2007-4993 RHSA-2007:0323  View
291409 57082 CVE-2007-4993 20071008 rPSA-2007-0210-1 xen  View
291410 57082 CVE-2007-4993 25825  View
291411 57082 CVE-2007-4993 USN-527  View
291412 57082 CVE-2007-4993 ADV-2007-3348  View
291413 57082 CVE-2007-4993 https://issues.rpath.com/browse/RPL-1752  View
291414 57082 CVE-2007-4993 FEDORA-2007-2708  View
291415 57082 CVE-2007-4993 FEDORA-2007-2270  View
291416 57082 CVE-2007-4993 FEDORA-2007-713  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52069 JVNDB-2007-000732 Xen の pygrub ユーティリティにおける権限昇格の脆弱性 Xen の pygrub (tools/pygrub/src/GrubConf.py) はゲストドメインをブートしている際、exec() 関数を使用した grub.conf ファイルの取扱に不備があり、ドメイン 0 で任意のコマンドを実行される、権限昇格の脆弱性が存在します。 CVE-2007-4993 28348 CVE-2007-4993 57082 6.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000732.html 2007-09-27 2008-10-29 View