PT-2007-5140 · Xen+1 · Xen+1

Steve Kemp · Published 2007-10-28 · Updated 2024-06-15 · CVE-2007-3919

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:M/Au:S/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Xen versions 3.1 and earlier

Description: The issue allows local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm, which is related to xenbaked and xenmon.py.

Recommendations: For Xen versions 3.1 and earlier, consider restricting access to the /tmp/xenq-shm file to prevent symlink attacks until a patch is available. As a temporary workaround, consider disabling the xenmon.py script until a patch is available. Avoid using xenbaked and xenmon.py in Xen versions 3.1 and earlier until the issue is resolved.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2007-3919

DSA-1395-1

OPENSUSE-SU-2024:11520-1

RHSA-2008:0194

RHSA-2008_0194

Affected Products

Red Hat

Xen

References · 121

• https://nvd.nist.gov/vuln/detail/CVE-2007-3919 · Security Note
• http://secunia.com/advisories/27497 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0194.html · Vendor Advisory
• http://secunia.com/advisories/27389 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11520-1 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2007-November/msg00004.html · Vendor Advisory
• http://secunia.com/advisories/27408 · Vendor Advisory
• http://debian.org/security/2007/dsa-1395 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2007:203 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2007-November/msg00075.html · Vendor Advisory
• https://suse.com/security/cve/CVE-2020-29567 · Note
• https://suse.com/security/cve/CVE-2020-27672 · Note
• https://suse.com/security/cve/CVE-2020-15567 · Note
• https://suse.com/security/cve/CVE-2019-17349 · Note
• https://suse.com/security/cve/CVE-2016-7777 · Note