CVE-2009-0784

2009-03-2523:30:00

CWE-362

[email protected]

web.nvd.nist.gov

cve-2009-0784

systemtap

race condition

stap tool

kernel modules

privilege escalation

CVSS2

6.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:C/A:C

AI Score

6.2

Confidence

Low

EPSS

Percentile

5.1%

JSON

Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors.

Affected configurations

NVD

Node

systemtapsystemtapMatch0.0.20080705

systemtapsystemtapMatch0.0.20090314

Node

debiandebian_linuxMatch4.0

debiandebian_linuxMatch5.0

VendorProductVersionCPE
systemtapsystemtap0.0.20080705cpe:/a:systemtap:systemtap:0.0.20080705:::
systemtapsystemtap0.0.20090314cpe:/a:systemtap:systemtap:0.0.20090314:::