oss-security - Re: CVE Request (xen)

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / NEWS community lists Wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Fri, 3 Oct 2008 08:06:31 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: coley@...re.org, berrange@...hat.com
Subject: Re: CVE Request (xen)

Hi Steve,

This one seems to have slipped through the cracks.

Thanks.

-- 
    JB


----- "Josh Bressers" <bressers@...hat.com> wrote:

> Hello,
> 
> This xen issue was just brought to our attention:
> https://bugzilla.redhat.com/show_bug.cgi?id=464817
> https://bugzilla.redhat.com/show_bug.cgi?id=464818
> 
> http://lists.xensource.com/archives/html/xen-devel/2008-09/msg00992.html
> 
> It seems that a xen guest can write some data into the xenstore that
> is
> later read by libvirt (and possibly other things), which could cause
> troubles for the Xen admin.
> 
> Thanks.
> 
> -- 
>     JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.