CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 2.1
CWE Name:  Permissions Privileges and Access Controls
Summary: red hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest os users to bypass intended access restrictions by leveraging ip address and source-port values, as demonstrated by copying and deleting an nfs directory tree.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2010-08-19
Last Modified Date: 2010-10-30