National Cyber Awareness System

Vulnerability Summary for CVE-2008-4405

Overview

xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console/tty, (2) console/limit, or (3) image/device-model-pid. NOTE: this issue was originally reported as an issue in libvirt 0.3.3 and xenstore, but CVE is considering the core issue to be related to Xen.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=464818

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=464818

External Source: MISC

Name: https://bugzilla.redhat.com/show_bug.cgi?id=464817

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=464817

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=464817

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=464817

External Source: CONFIRM

Name: http://xenbits.xensource.com/staging/xen-3.3-testing.hg?rev/e0e17216ba70

Hyperlink:http://xenbits.xensource.com/staging/xen-3.3-testing.hg?rev/e0e17216ba70

External Source: VUPEN

Name: ADV-2008-2709

Hyperlink:http://www.vupen.com/english/advisories/2008/2709

External Source: SECTRACK

Name: 1020955

Hyperlink:http://www.securitytracker.com/id?1020955

External Source: BID

Name: 31499

Hyperlink:http://www.securityfocus.com/bid/31499

External Source: REDHAT

Name: RHSA-2009:0003

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-0003.html

External Source: MLIST

Name: [oss-security] 20081004 Re: CVE Request (xen)

Hyperlink:http://www.openwall.com/lists/oss-security/2008/10/04/3

External Source: MANDRIVA

Name: MDVSA-2009:016

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2009:016

External Source: SECUNIA

Name: 32064

Hyperlink:http://secunia.com/advisories/32064

External Source: OVAL

Name: oval:org.mitre.oval:def:10627

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10627

External Source: MLIST

Name: [oss-security] 20080930 CVE Request (xen)

Hyperlink:http://openwall.com/lists/oss-security/2008/09/30/6

External Source: MLIST

Name: [xen-devel] 20080930 Re: [PATCH] [Xend] Move some backend configuration

Hyperlink:http://lists.xensource.com/archives/html/xen-devel/2008-09/msg00994.html

External Source: MLIST

Name: [xen-devel] 20080930 [PATCH] [Xend] Move some backend configuration

Hyperlink:http://lists.xensource.com/archives/html/xen-devel/2008-09/msg00992.html

External Source: SUSE

Name: SUSE-SR:2009:015

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html

References to Check Content

Identifier:oval:org.mitre.oval:def:10627

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10627