CVE-2007-4993: xensource_inc xen Improper Input Validation

Modified

Published 27-09-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-4993 is a medium (CVSS 6.9) Improper Input Validation vulnerability in xensource_inc xen. EPSS estimates a 0.63% chance of exploitation in the next 30 days, higher than 50.3% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 22-09-2007)

Source freshness unavailable

How is this decided?

CVSS score

6.9/10

010

Medium · v2.0 (NVD)

EPSS score

0.63%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 2

DSA-1384-1 RHSA-2007:0323

Timeline

27-09-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.

CVSS metrics

1 score · 1 source · 1 version

v2.06.9

EPSS trend

Probability

0.63%

Chance of exploitation in the next 30 days

Percentile

50%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.63% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

exploit-databaselocallinuxVerified
Xen 3.0.3 - pygrub TOOLS/PYGRUB/SRC/GRUBCONF.PY Local Command Injection
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Version check

Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.

Xensource_inc1 product

xen3.0.3

1 vendor · 1 product

References

21 links

www.mandriva.com/security/advisories?name=MDKSA-2007:203Vendor AdvisoryX Refsource MANDRIVA
issues.rpath.com/browse/RPL-1752X Refsource CONFIRM
www.redhat.com/archives/fedora-package-announce/2007-October/msg00030.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/27047Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26986Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/27486Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27085Third Party AdvisoryX Refsource SECUNIA
bugzilla.xensource.com/bugzilla/show_bug.cgi?id=1068X Refsource CONFIRM
secunia.com/advisories/27141Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2007-November/msg00004.htmlVendor AdvisoryX Refsource FEDORA

Show all 21 references

secunia.com/advisories/27103Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/481825/100/0/threadedMailing ListX Refsource BUGTRAQ
www.redhat.com/support/errata/RHSA-2007-0323.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/27161Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/25825VDB EntryX Refsource BID
secunia.com/advisories/27072Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11240VDB EntrySignatureX Refsource OVAL
www.redhat.com/archives/fedora-package-announce/2007-October/msg00082.htmlVendor AdvisoryX Refsource FEDORA
www.ubuntu.com/usn/usn-527-1Vendor AdvisoryX Refsource UBUNTU
www.debian.org/security/2007/dsa-1384Vendor AdvisoryX Refsource DEBIAN
www.vupen.com/english/advisories/2007/3348VDB EntryX Refsource VUPEN