Veracode Vulnerability DatabaseVERACODE:23826Privilege Escalation
EPSS
Percentile
5.1%
systemtap is vulnerable to privilege escalation. A race condition was discovered in SystemTap that could allow users in the stapusr group to elevate privileges to that of members of the stapdev group (and hence root), bypassing directory confinement restrictions and allowing them to insert arbitrary SystemTap kernel modules.
References
secunia.com/advisories/34441
secunia.com/advisories/34479
secunia.com/advisories/34548
support.avaya.com/elmodocs2/security/ASA-2009-110.htm
www.debian.org/security/2009/dsa-1755
www.redhat.com/security/updates/classification/#moderate
www.redhat.com/support/errata/RHSA-2009-0373.html
www.vupen.com/english/advisories/2009/0907
access.redhat.com/errata/RHSA-2009:0373
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11613
Related
