Description

Fedora has acknowledged a security issue, which can be exploited by malicious users to gain knowledge of sensitive information.

The security issue is caused due to an error within the QEMU VNC code used by Xen for fully virtualised machines, which can be exploited to read arbitrary files on the host system.

Successful exploitation requires that the QEMU monitor mode is enabled and that the attacker has access to the VNC server.

Solution
Apply updated packages.
Further details available to Secunia VIM customers

Original Advisory
http://fedoranews.org/cms/node/2802
http://fedoranews.org/cms/node/2803

Deep Links
Links available to Secunia VIM customers