CVE-2007-4993 - CVE House
Back to Database
Status published Medium CVE-2007-4993

pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain,...

Vulnerability Description

pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-4993

Credits & Attribution

No credits recorded in the NVD database.

References

More from xensource inc

View All →
CVE-2008-1619
The ssm_i emulation in Xen 5.1 on IA64 architectures allows...
Medium 4.3
CVE-2007-6207
Xen 3.x, possibly before 3.1.2, when running on IA64 systems,...
Low 2.1
CVE-2007-5907
Xen 3.1.1 does not prevent modification of the CR4 TSC...
Medium 4.7
CVE-2007-5906
Xen 3.1.1 allows virtual guest system users to cause a...
Medium 4.7
CVE-2007-3919
(1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier...
Medium 6

Affected Vendor

xensource inc

View all reports →

Affected Software

xen
Vulnerable Versions:
3.0.3

Timeline

Official Publish: September 27th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.