CVE-2007-4993

pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local...

6.9 MediumPublic exploit

pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.

Exploit likelihood

0.63%Down 2.6 points since Feb 4, 2022

What each source reports

NVD Score used 6.9

Record: CVE-2007-4993
CVSS 2.0: 6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-4993
Updated: 2026-11-02

EUVDEUVD-2007-4974 No score

Record: EUVD-2007-4974
Updated: 2026-11-03

GitHub AdvisoriesGHSA-43w7-6v4p-jxc3 No score

pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local...

Record: GHSA-43w7-6v4p-jxc3
Weakness: CWE-20
Updated: 2026-11-02

Affected products

xensource inc xen

Affected packages

Affected packages
Package	Affected	Fixed
`xen-3.0` Debian:4.0 From an advisory covering 2 CVEs	before 3.0.3-0-3, plus listed versions 3.0.3-0-2	3.0.3-0-3
`xen` Red Hat:rhel_virtualization:5::client From an advisory covering 3 CVEs	before 0:3.0.3-25.0.4.el5	0:3.0.3-25.0.4.el5
`xen-debuginfo` Red Hat:rhel_virtualization:5::client From an advisory covering 3 CVEs	before 0:3.0.3-25.0.4.el5	0:3.0.3-25.0.4.el5
`xen-devel` Red Hat:rhel_virtualization:5::client From an advisory covering 3 CVEs	before 0:3.0.3-25.0.4.el5	0:3.0.3-25.0.4.el5
`xen` Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs	before 0:3.0.3-25.0.4.el5	0:3.0.3-25.0.4.el5
`xen-debuginfo` Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs	before 0:3.0.3-25.0.4.el5	0:3.0.3-25.0.4.el5
`xen-libs` Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs	before 0:3.0.3-25.0.4.el5	0:3.0.3-25.0.4.el5
`xen` Red Hat:rhel_virtualization:5::server From an advisory covering 3 CVEs	before 0:3.0.3-25.0.4.el5	0:3.0.3-25.0.4.el5
`xen-debuginfo` Red Hat:rhel_virtualization:5::server From an advisory covering 3 CVEs	before 0:3.0.3-25.0.4.el5	0:3.0.3-25.0.4.el5
`xen-devel` Red Hat:rhel_virtualization:5::server From an advisory covering 3 CVEs	before 0:3.0.3-25.0.4.el5	0:3.0.3-25.0.4.el5
`xen` Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs	before 0:3.0.3-25.0.4.el5	0:3.0.3-25.0.4.el5
`xen-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs	before 0:3.0.3-25.0.4.el5	0:3.0.3-25.0.4.el5
`xen-libs` Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs	before 0:3.0.3-25.0.4.el5	0:3.0.3-25.0.4.el5

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Xen 3.0.3 - pygrub TOOLS/PYGRUB/SRC/GRUBCONF.PY Local Command Injection	2007-09-22

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	affected, aliases, exploits, facts, references, title	Exploit-DB, GitHub Advisories, OSV
Nov 2, 2026	first indexed	CVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-4993 is a medium vulnerability (CVSS 6.9) in Xensource Inc Xen, published September 27, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.63%, the 50th percentile. No source names a fixed version.

References

Show 31 moreShow less