Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-4993
HistorySep 27, 2007 - 12:00 a.m.

CVE-2007-4993

2007-09-2700:00:00
ubuntu.com
ubuntu.com
12

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

0.4%

pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest
domain, allows local users with elevated privileges in the guest domain to
execute arbitrary commands in domain 0 via a crafted grub.conf file whose
contents are used in exec statements.

OSVersionArchitecturePackageVersionFilename
ubuntu7.04noarchxen-3.0< 3.0.3-0ubuntu10.1UNKNOWN
ubuntu7.10noarchxen-3.1< 3.1.0-0ubuntu16UNKNOWN

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

0.4%