EDB-33255

functional

Xen 3.x - pygrub Local Authentication Bypass

view exploit source exploit_dbverifiedtype localauthor Jan Lieskovskypublished 2009-09-25catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2009-3525UShigh7.2Exploit
The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-virtualized guests, which allows attackers with access to the p…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan