EDB-32446

functional

Xen 3.3 - XenStore Domain Configuration Data Unsafe Storage

view exploit source exploit_dbverifiedtype localauthor Pascal Bouchareinepublished 2008-09-30catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2008-4405UShigh7.2Exploit
xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, whic…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan