CVE-2013-2007 in Linux Foundation Xen
Summary
The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.
Reservation
02/19/2013
Disclosure
05/21/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 8617 | Linux Foundation Xen qemu-ga qga-fsfreeze-hook.log access control | 264 | Proof-of-Concept | Official fix | CVE-2013-2007 |