Candidate: CVE-2009-4011 PublicDate: 2019-11-09 03:15:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4011 Description: dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get a bash access as xenXX user on the dom0, and then access a potentially reuse an already opened VPS console. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H [8.1 HIGH] Patches_dtc-xen: upstream_dtc-xen: released (0.5.4-1) hardy_dtc-xen: ignored (reached end-of-life) lucid_dtc-xen: not-affected (0.5.4-1) maverick_dtc-xen: not-affected natty_dtc-xen: not-affected oneiric_dtc-xen: not-affected devel_dtc-xen: not-affected