CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Improper Input Validation
Summary: pygrub (tools/pygrub/src/grubconf.py) in xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2007-09-27
Last Modified Date: 2018-10-15