Red Hat Security AdvisoryRHSA-2009:0003
xen security and bug fix update
Released 2009-01-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) xen-3.0.3-64.el5_2.9, xen-libs-3.0.3-64.el5_2.9, xen-libs-3.0.3-64.el5_2.9.i386 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) xen-3.0.3-64.el5_2.9, xen-libs-3.0.3-64.el5_2.9, xen-libs-3.0.3-64.el5_2.9.i386
- Red Hat Enterprise Linux Desktop Multi OS (v. 5 client) xen-3.0.3-64.el5_2.9, xen-3.0.3-64.el5_2.9.i386, xen-devel-3.0.3-64.el5_2.9 +1
- Red Hat Enterprise Linux Virtualization (v. 5 server) xen-3.0.3-64.el5_2.9, xen-3.0.3-64.el5_2.9.i386, xen-3.0.3-64.el5_2.9.ia64 +3
Fixes 2 records
Priority LOW 34
xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denia…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.01042 · Published 2008-10-03 · Fixed CWE-264
Priority LOW 30
qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file.
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00319 · Published 2008-11-07 · Fixed CWE-59
