CVE-2007-4993: Xensource Inc Xen

Medium severity, CVSS 6.9. EPSS: 0.6% chance of exploitation in the next 30 days.

pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.

Affected products

• Xensource Inc Xen: version 3.0.3 only

Published 2007-09-27. Last modified 2026-06-16.