CVE-2007-4993

no score yetEPSS 0.6%

pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2007-09-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

xensource_inc:xen

References

http://bugzilla.xensource.com/bugzilla/show_bug.cgi?id=1068
http://secunia.com/advisories/26986
http://secunia.com/advisories/27047
http://secunia.com/advisories/27072
http://secunia.com/advisories/27085

Check your stack JSON