CVE-2007-4993 PUBLISHED CVSS 6.900000095367432 MEDIUM

pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.

EPSS 0.26% · 49.6th percentile

Risk Scores

CVSS v2.0
6.900000095367432
EPSS Score
0.26%
49.6th percentile

Affected Products

VendorProductVersions
xensource_incxen3.0.3
n/an/an/a

Timeline

References

…and 2 more

Open in Interactive Console →