VULNERABILITY INTELLIGENCE

CVE-2007-3919

CVSS score6 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2007-10-28
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:S/C:N/I:C/A:C

Description

(1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm.

Weakness classification

  • CWE-59: Improper Link Resolution Before File Access ('Link Following')

Primary references