Oval Definition:	oval:org.mitre.oval:tst:39479
Comment: xen-libs is earlier than 0:3.0.3-94.el5_4.1 Type: rpminfo_test Namespace: linux Check_Existence: at_least_one_exists Check: at least one State Operator: AND References Object: oval:org.mitre.oval:obj:14810 State: oval:org.mitre.oval:ste:11188 Referencing Definitions Definition ID Class Title Last Modified oval:org.mitre.oval:def:9466 V The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-virtualized guests, which allows attackers with access to the para-virtualized guest console to boot the guest or modify the guest's kernel boot parameters without providing the expected password. 2013-04-29
BACK