Lucene search

[email protected]CVE-2009-4273

HistoryJan 26, 2010 - 6:30 p.m.

CVE-2009-4273

2010-01-2618:30:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2009-4273

systemtap

remote attackers

arbitrary commands

shell metacharacters

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.099

Percentile

94.9%

JSON

stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request.

Affected configurations

NVD

Node

systemtapsystemtapRange≤1.0

systemtapsystemtapMatch0.2.2

systemtapsystemtapMatch0.3

systemtapsystemtapMatch0.4

systemtapsystemtapMatch0.5

systemtapsystemtapMatch0.5.3

systemtapsystemtapMatch0.5.4

systemtapsystemtapMatch0.5.5

systemtapsystemtapMatch0.5.7

systemtapsystemtapMatch0.5.8

systemtapsystemtapMatch0.5.9

systemtapsystemtapMatch0.5.10

systemtapsystemtapMatch0.5.12

systemtapsystemtapMatch0.5.13

systemtapsystemtapMatch0.5.14

systemtapsystemtapMatch0.6

systemtapsystemtapMatch0.6.2

systemtapsystemtapMatch0.7

systemtapsystemtapMatch0.7.2

systemtapsystemtapMatch0.8

systemtapsystemtapMatch0.9

systemtapsystemtapMatch0.9.5

systemtapsystemtapMatch0.9.7

systemtapsystemtapMatch0.9.8

systemtapsystemtapMatch0.9.9

VendorProductVersionCPE
systemtapsystemtapcpe:/a:systemtap:systemtap::::
systemtapsystemtap0.2.2cpe:/a:systemtap:systemtap:0.2.2:::
systemtapsystemtap0.5.7cpe:/a:systemtap:systemtap:0.5.7:::
systemtapsystemtap0.6cpe:/a:systemtap:systemtap:0.6:::
systemtapsystemtap0.5cpe:/a:systemtap:systemtap:0.5:::
systemtapsystemtap0.9.8cpe:/a:systemtap:systemtap:0.9.8:::
systemtapsystemtap0.5.5cpe:/a:systemtap:systemtap:0.5.5:::
systemtapsystemtap0.9cpe:/a:systemtap:systemtap:0.9:::
systemtapsystemtap0.5.10cpe:/a:systemtap:systemtap:0.5.10:::
systemtapsystemtap0.5.8cpe:/a:systemtap:systemtap:0.5.8:::

Vendor	Product	Version	CPE
systemtap	systemtap		cpe:/a:systemtap:systemtap::::
systemtap	systemtap	0.2.2	cpe:/a:systemtap:systemtap:0.2.2:::
systemtap	systemtap	0.5.7	cpe:/a:systemtap:systemtap:0.5.7:::
systemtap	systemtap	0.6	cpe:/a:systemtap:systemtap:0.6:::
systemtap	systemtap	0.5	cpe:/a:systemtap:systemtap:0.5:::
systemtap	systemtap	0.9.8	cpe:/a:systemtap:systemtap:0.9.8:::
systemtap	systemtap	0.5.5	cpe:/a:systemtap:systemtap:0.5.5:::
systemtap	systemtap	0.9	cpe:/a:systemtap:systemtap:0.9:::
systemtap	systemtap	0.5.10	cpe:/a:systemtap:systemtap:0.5.10:::
systemtap	systemtap	0.5.8	cpe:/a:systemtap:systemtap:0.5.8:::