CVE-2008-4405 describes a vulnerability in Xen 3.0.3, specifically within its xend component, where guest virtual machines can write to sensitive xenstore directory trees like /local/domain. This flaw allows guest OS users to cause a denial of service and potentially other unspecified impacts. With a CVSS score of 7.2, this vulnerability is considered highly severe, allowing a local attacker with low complexity to achieve complete confidentiality, integrity, and availability compromise. While there is an ExploitDB entry (EDB-32446) for Xen 3.3 related to unsafe xenstore data storage, there is no evidence of active exploitation, Metasploit modules, or significant community discussion for this specific CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.0.3CPE matchmatch criteria | cpe:2.3:a:citrix:xen:3.0.3:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.