Description
Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors.
References (8)
Core 8
Core References
Patch, Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2009/dsa-1755
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/34479
Third Party Advisory x_refsource_confirm
http://support.avaya.com/elmodocs2/security/ASA-2009-110.htm
Third Party Advisory vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11613
Third Party Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2009-0373.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/34548
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2009/0907
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/34441
Scores
EPSS
0.0026
EPSS Percentile
17.0%
Details
CWE
CWE-362
Status
published
Products (4)
debian/debian_linux
4.0
debian/debian_linux
5.0
systemtap/systemtap
0.0.20080705
systemtap/systemtap
0.0.20090314
Published
Mar 25, 2009
Tracked Since
Feb 18, 2026