{"id":"CVE-2008-4405","aliases":["EUVD-2008-4386","GHSA-ffpp-v4vp-9vvh","RHSA-2009:0003"],"status":"published","title":"xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory...","description":"xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console/tty, (2) console/limit, or (3) image/device-model-pid.  NOTE: this issue was originally reported as an issue in libvirt 0.3.3 and xenstore, but CVE is considering the core issue to be related to Xen.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01042,"percentile":0.64269,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-264"],"published":"2008-10-03T17:18:00Z","modified":"2026-06-26T12:18:36Z","exploits":[{"source":"exploitdb","id":"EDB-32446","title":"Xen 3.3 - XenStore Domain Configuration Data Unsafe Storage","type":"local","platform":"linux","date":"2008-09-30","verified":true,"url":"https://www.exploit-db.com/exploits/32446"}],"affected":[{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::client","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3-64.el5_2.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::client","package":"xen-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3-64.el5_2.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::client","package":"xen-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3-64.el5_2.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3-64.el5_2.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xen-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3-64.el5_2.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"xen-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3-64.el5_2.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::server","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3-64.el5_2.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::server","package":"xen-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3-64.el5_2.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::server","package":"xen-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3-64.el5_2.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3-64.el5_2.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xen-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3-64.el5_2.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"xen-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3-64.el5_2.9"}]}],"bundled":2}],"products":[{"vendor":"citrix","product":"xen"}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/2709","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=464817","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:016","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://secunia.com/advisories/32064","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://lists.xensource.com/archives/html/xen-devel/2008-09/msg00992.html","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://openwall.com/lists/oss-security/2008/09/30/6","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0003.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://xenbits.xensource.com/staging/xen-3.3-testing.hg?rev/e0e17216ba70","tags":["x_refsource_CONFIRM","x_transferred","Exploit"]},{"url":"http://lists.xensource.com/archives/html/xen-devel/2008-09/msg00994.html","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.securityfocus.com/bid/31499","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10627","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.securitytracker.com/id?1020955","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/04/3","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=464818","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4405","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-ffpp-v4vp-9vvh"},{"url":"https://access.redhat.com/errata/RHSA-2009:0003","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=464455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=470795","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0003.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4405","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4405","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4993","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4993","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4993","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2008-4405","description":"xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console/tty, (2) console/limit, or (3) image/device-model-pid.  NOTE: this issue was originally reported as an issue in libvirt 0.3.3 and xenstore, but CVE is considering the core issue to be related to Xen.","status":"published","published":"2008-10-03T17:18:00Z","modified":"2024-08-07T10:17:09.788Z","updated_at":"2026-11-02T14:34:46.950176Z"}],"euvd":[{"id":"EUVD-2008-4386","description":"xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console/tty, (2) console/limit, or (3) image/device-model-pid.  NOTE: this issue was originally reported as an issue in libvirt 0.3.3 and xenstore, but CVE is considering the core issue to be related to Xen.","status":"published","published":"2008-10-03T17:18:00Z","modified":"2024-08-07T10:17:09Z","updated_at":"2026-11-03T01:38:47.949767Z"}],"ghsa":[{"id":"GHSA-ffpp-v4vp-9vvh","title":"xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory...","description":"xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console/tty, (2) console/limit, or (3) image/device-model-pid.  NOTE: this issue was originally reported as an issue in libvirt 0.3.3 and xenstore, but CVE is considering the core issue to be related to Xen.","status":"published","published":"2022-05-02T00:09:44Z","modified":"2023-01-31T05:06:34Z","updated_at":"2026-11-02T14:49:03.483511Z"}],"nvd":[{"id":"CVE-2008-4405","description":"xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console/tty, (2) console/limit, or (3) image/device-model-pid.  NOTE: this issue was originally reported as an issue in libvirt 0.3.3 and xenstore, but CVE is considering the core issue to be related to Xen.","status":"published","published":"2008-10-03T17:41:40.477Z","modified":"2026-06-16T22:57:45.203Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:01:28.625777Z"}],"osv":[{"id":"RHSA-2009:0003","title":"Red Hat Security Advisory: xen security and bug fix update","status":"published","published":"2024-09-15T17:34:05Z","modified":"2026-06-26T12:18:36.049710827Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}