7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.4 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
24.9%
Debian Security Advisory DSA-2348-1 [email protected]
http://www.debian.org/security/ Moritz Muehlenhoff
November 17, 2011 http://www.debian.org/security/faq
Package : systemtap
Vulnerability : several
Problem type : remote
Debian-specific: no
CVE ID : CVE-2010-4170 CVE-2010-4171 CVE-2011-2503
Several vulnerabilities were discovered in SystemTap, an instrumentation
system for Linux:
CVE-2011-2503
It was discovered that a race condition in staprun could lead to
privilege escalation.
CVE-2010-4170
It was discovered that insufficient validation of environment
variables in staprun could lead to privilege escalation.
CVE-2010-4171
It was discovered that insufficient validation of module unloading
could lead to denial of service.
For the stable distribution (squeeze), this problem has been fixed in
version 1.2-5+squeeze1.
For the unstable distribution (sid), this problem has been fixed in
version 1.6-1.
We recommend that you upgrade your systemtap packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/
Mailing list: [email protected]
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 6 | i386 | systemtap | < 1.2-5+squeeze1 | systemtap_1.2-5+squeeze1_i386.deb |
Debian | 6 | all | systemtap | < 1.2-5+squeeze1 | systemtap_1.2-5+squeeze1_all.deb |
Debian | 6 | i386 | systemtap-grapher | < 1.2-5+squeeze1 | systemtap-grapher_1.2-5+squeeze1_i386.deb |
Debian | 6 | s390 | systemtap-grapher | < 1.2-5+squeeze1 | systemtap-grapher_1.2-5+squeeze1_s390.deb |
Debian | 6 | powerpc | systemtap-client | < 1.2-5+squeeze1 | systemtap-client_1.2-5+squeeze1_powerpc.deb |
Debian | 6 | ia64 | systemtap-runtime | < 1.2-5+squeeze1 | systemtap-runtime_1.2-5+squeeze1_ia64.deb |
Debian | 6 | ia64 | systemtap-grapher | < 1.2-5+squeeze1 | systemtap-grapher_1.2-5+squeeze1_ia64.deb |
Debian | 6 | powerpc | systemtap-grapher | < 1.2-5+squeeze1 | systemtap-grapher_1.2-5+squeeze1_powerpc.deb |
Debian | 6 | ia64 | systemtap-client | < 1.2-5+squeeze1 | systemtap-client_1.2-5+squeeze1_ia64.deb |
Debian | 6 | s390 | systemtap-server | < 1.2-5+squeeze1 | systemtap-server_1.2-5+squeeze1_s390.deb |