Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-4170
HistoryDec 07, 2010 - 10:00 p.m.

CVE-2010-4170

2010-12-0722:00:02
CWE-264
[email protected]
web.nvd.nist.gov
4

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

18.0%

JSON

The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.

Affected configurations

Nvd
Node
systemtapsystemtapMatch1.3
VendorProductVersionCPE
systemtapsystemtap1.3cpe:2.3:a:systemtap:systemtap:1.3:*:*:*:*:*:*:*

References

Related

packetstorm 2
openvas 21
exploitpack 1
veracode 1
nessus 14
metasploit 1
zdt 2
ubuntucve 1
debiancve 1
cve 1
redhat 2
cvelist 1
exploitdb 2
centos 2
seebug 1
prion 1
fedora 5
oraclelinux 2
debian 1
osv 1
packetstorm
packetstorm
Linux Systemtap Privilege Escalation
2010-11-26 00:00:00
SystemTap 1.3 MODPROBE_OPTIONS Privilege Escalation
2019-04-19 00:00:00
openvas
openvas
CentOS Update for systemtap CESA-2010:0895 centos4 i386
2010-11-23 00:00:00
RedHat Update for systemtap RHSA-2010:0895-01
2010-11-23 00:00:00
CentOS Update for systemtap CESA-2010:0895 centos4 i386
2010-11-23 00:00:00
exploitpack
exploitpack
SystemTap - Local Privilege Escalation
2010-11-26 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:50:56
nessus
nessus
RHEL 4 : systemtap (RHSA-2010:0895)
2010-11-18 00:00:00
CentOS 4 : systemtap (CESA-2010:0895)
2010-11-24 00:00:00
Scientific Linux Security Update : systemtap on SL4.x i386/x86_64
2012-08-01 00:00:00
metasploit
metasploit
SystemTap MODPROBE_OPTIONS Privilege Escalation
2019-04-18 17:15:22
zdt
zdt
SystemTap 1.3 - MODPROBE_OPTIONS Privilege Escalation Exploit
2019-04-19 00:00:00
Local Root Privilege systemtap Escalation Vulnerability
2010-11-27 00:00:00
ubuntucve
ubuntucve
CVE-2010-4170
2010-12-07 00:00:00
debiancve
debiancve
CVE-2010-4170
2010-12-07 22:00:02
cve
cve
CVE-2010-4170
2010-12-07 22:00:02
redhat
redhat
(RHSA-2010:0895) Moderate: systemtap security update
2010-11-17 00:00:00
(RHSA-2010:0894) Important: systemtap security update
2010-11-17 00:00:00
cvelist
cvelist
CVE-2010-4170
2010-12-07 21:00:00
exploitdb
exploitdb
SystemTap 1.3 - MODPROBE_OPTIONS Privilege Escalation (Metasploit)
2019-04-19 00:00:00
SystemTap - Local Privilege Escalation
2010-11-26 00:00:00
centos
centos
systemtap security update
2010-11-17 18:59:39
systemtap security update
2010-11-17 14:50:12
seebug
seebug
systemtap - Local Root Privilege Escalation Vulnerability
2014-07-01 00:00:00
prion
prion
Design/Logic Flaw
2010-12-07 22:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: systemtap-1.3-3.fc14
2010-11-19 00:03:39
[SECURITY] Fedora 12 Update: systemtap-1.3-3.fc12
2010-11-19 00:04:42
[SECURITY] Fedora 13 Update: systemtap-1.3-3.fc13
2010-11-19 00:05:43
oraclelinux
oraclelinux
systemtap security update
2010-11-17 00:00:00
systemtap security update
2010-11-17 00:00:00
debian
debian
[SECURITY] [DSA 2348-1] systemtap security update
2011-11-20 19:58:26
osv
osv
systemtap - several
2011-11-17 00:00:00

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

18.0%

JSON
Related for NVD:CVE-2010-4170
packetstorm2openvas21exploitpack1veracode1nessus14metasploit1zdt2ubuntucve1debiancve1cve1redhat2cvelist1exploitdb2centos2seebug1prion1fedora5oraclelinux2debian1osv1