EUVD-2008-4386

Malware in sbrugna...

openSUSE Security Update : xen (xen-1239)

xend did not properly enforce access control of the xenstore directory tree, therefore allowing guest VM's to write there. This could lead to security problems if other applications such as libvirt are not prepared for untrusted data in the xenstore directory CVE-2008-4405. %NASLMINLEVEL 70300 C...

CVE-2008-4405

xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to 1...