611 matches found
RHEL 4 : systemtap (RHSA-2010:0125)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0125 advisory. - systemtap: Crash with systemtap script using getargv CVE-2010-0411 Note that Nessus has not tested for this issue but has instead relied only on th...
RHEL 5 : systemtap (RHSA-2010:0124)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0124 advisory. SystemTap is an instrumentation system for systems running the Linux kernel, version 2.6. Developers can write scripts to collect data on th...
systemtap security update
CentOS Errata and Security Advisory CESA-2010:0125 Updated systemtap packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SystemTap is an instrumentation system for...
systemtap: Crash with systemtap script using __get_argv()
Multiple integer signedness errors in the 1 getargv and 2 getcompatargv functions in tapset/auxsyscalls.stp in SystemTap 1.1 allow local users to cause a denial of service script crash, or system crash or hang via a process with a large number of arguments, leading to a buffer overflow...
Moderate: Red Hat Security Advisory: systemtap security update
Updated systemtap packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SystemTap is an instrumentation system for systems running the Linux kernel, version 2.6...
systemtap: remote code execution via stap-server
stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request...
Important: Red Hat Security Advisory: systemtap security update
Updated systemtap packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. SystemTap is an instrumentation system for systems running the Linux kernel, version 2.6...
systemtap: Crash with systemtap script using __get_argv()
Multiple integer signedness errors in the 1 getargv and 2 getcompatargv functions in tapset/auxsyscalls.stp in SystemTap 1.1 allow local users to cause a denial of service script crash, or system crash or hang via a process with a large number of arguments, leading to a buffer overflow...
systemtap security update
0.6.2-2.0.1.el48.1 - Detect enterprise-release 0.6.2-2.1 Resolve bug 561886, CVE-2010-0411...
systemtap security update
0.9.7-5.3 - rhbz556564-2: CVE-2009-4273 cont'd aka CVE-2010-0412 - rhbz559719: CVE-2010-0411 - pr11286: stap-client --server operation 0.9.7-5.2 - rhbz556564: CVE-2009-4273...
Design/Logic Flaw
stap-server in SystemTap 1.1 does not properly restrict the value of the -B aka BUILD option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273...
CVE-2010-0412
stap-server in SystemTap 1.1 does not properly restrict the value of the -B aka BUILD option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273...
CVE-2010-0412
stap-server in SystemTap 1.1 does not properly restrict the value of the -B aka BUILD option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273...
DEBIAN-CVE-2010-0412
stap-server in SystemTap 1.1 does not properly restrict the value of the -B aka BUILD option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273...
CVE-2010-0412
stap-server in SystemTap 1.1 does not properly restrict the value of the -B aka BUILD option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273...
CVE-2010-0412
stap-server in SystemTap 1.1 does not properly restrict the value of the -B aka BUILD option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273...
CVE-2010-0412: Undefined Security Weakness
stap-server in SystemTap 1.1 does not properly restrict the value of the -B aka BUILD option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273...
CVE-2010-0412
SystemTap 1.1 and earlier contain two CVEs tracked with this entry: CVE-2009-4273 and CVE-2010-0411. CVE-2009-4273 allows remote code execution via stap-server by unsafely handling shell metacharacters in stap command-line arguments; stap-server may run with root privileges, and remote exploitati...
CVE-2010-0412
stap-server in SystemTap 1.1 does not properly restrict the value of the -B aka BUILD option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273...
