• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Xen 'xenmon.py' and 'xenbaked' Insecure Temporary File Creation Vulnerability

Bugtraq ID:	26190
Class:	Design Error
CVE:	CVE-2007-3919
Remote:	No
Local:	Yes
Published:	Oct 23 2007 12:00AM
Updated:	May 13 2008 08:55PM
Credit:	Steve Kemp from Debian disclosed this vulnerability.
Vulnerable:	XenSource Xen 3.0 RedHat Fedora Core7 0 RedHat Enterprise Linux Virtualization 5 server RedHat Enterprise Linux Desktop Workstation 5 client RedHat Enterprise Linux Desktop Multi OS 5 client RedHat Enterprise Linux 5 server MandrakeSoft Linux Mandrake 2007.1 x86_64 MandrakeSoft Linux Mandrake 2007.1 MandrakeSoft Linux Mandrake 2007.0 x86_64 MandrakeSoft Linux Mandrake 2007.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable: