Red Hat Security AdvisoryRHSA-2009:1472
xen security and bug fix update
Released 2009-10-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) xen-3.0.3-94.el5_4.1, xen-libs-3.0.3-94.el5_4.1, xen-libs-3.0.3-94.el5_4.1.i386 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) xen-3.0.3-94.el5_4.1, xen-libs-3.0.3-94.el5_4.1, xen-libs-3.0.3-94.el5_4.1.i386
- Red Hat Enterprise Linux Desktop Multi OS (v. 5 client) xen-3.0.3-94.el5_4.1, xen-3.0.3-94.el5_4.1.i386, xen-devel-3.0.3-94.el5_4.1 +1
- Red Hat Enterprise Linux Virtualization (v. 5 server) xen-3.0.3-94.el5_4.1, xen-3.0.3-94.el5_4.1.i386, xen-3.0.3-94.el5_4.1.ia64 +3
Fixes 1 record
Priority LOW 34
The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-virtualized guests, which allows attackers with access to the para-virtualized guest console to boot th…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.0124 · Published 2009-10-05 · Fixed CWE-264
