CVE-2007-4993: Input Validation
pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4993?
CVE-2007-4993 is considered to be a high severity vulnerability due to the potential for arbitrary command execution.
How do I fix CVE-2007-4993?
To fix CVE-2007-4993, upgrade your Xen installation to a version that is not affected by this vulnerability.
Who is affected by CVE-2007-4993?
CVE-2007-4993 affects local users with elevated privileges in guest domains running Xen 3.0.3.
What type of attack does CVE-2007-4993 facilitate?
CVE-2007-4993 facilitates local privilege escalation attacks through crafted grub.conf files.
What component of Xen is primarily affected by CVE-2007-4993?
The pygrub component of Xen is primarily affected by CVE-2007-4993, specifically the GrubConf.py script.