| Package | Affected versions | Patched versions |
|---|---|---|
| xenserver | = 6.0.2= 6.2.0= 6.5= 7.0 |
The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via string quotes and S-expressions in the bootloader configuration file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free