CVE-2008-4993
Fixed in a distro release EPSS <1%
qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file.
Products: xen
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 5 | xen | 0:3.0.3-64.el5_2.9 |
| Red Hat Enterprise Linux 5 | xen-debuginfo | 0:3.0.3-64.el5_2.9 |
| Red Hat Enterprise Linux 5 | xen-libs | 0:3.0.3-64.el5_2.9 |
| Red Hat rhel virtualization 5 | xen | 0:3.0.3-64.el5_2.9 |
| Red Hat rhel virtualization 5 | xen-debuginfo | 0:3.0.3-64.el5_2.9 |
| Red Hat rhel virtualization 5 | xen-devel | 0:3.0.3-64.el5_2.9 |