CVE-2009-3525
05.10.2009, 19:30
The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-virtualized guests, which allows attackers with access to the para-virtualized guest console to boot the guest or modify the guest's kernel boot parameters without providing the expected password.Enginsight
| Vendor | Product | Version |
|---|---|---|
| xen | xen | 3.0.3 |
| xen | xen | 3.3.0 |
| xen | xen | 3.3.1 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| xen |
| ||||||||||||||||
| xen-3.1 |
| ||||||||||||||||
| xen-3.2 |
| ||||||||||||||||
| xen-3.3 |
|
Common Weakness Enumeration
References